which is named "Credential Roaming". When installing a new domain on a domain controller, a public and private key pair is generated, associated with DPAPI. When a master key is generated on a client workstation, the client communicates through an authenticated RPC call with a domain controller to retrieve a copy of the domain's public key. The client encrypts the master key with the domain controller's public key. Finally, it stores this new backup master key in its AppData directory, just like traditional master key storage. Use of DPAPI by Microsoft software While not universally implemented in all Microsoft products, the use of DPAPI by Microsoft products has increased with each successive version of Windows. However, many applications from Microsoft and third-party developers still prefer to use their own protection approach or have only recently switched to use DPAPI. For example, Internet Explorer versions 4.0–6.0, Outlook Express and MSN Explorer used the older Protected Storage (PStore) API to store saved credentials such as passwords etc. Internet Explorer 7 now protects stored user credentials using DPAPI. Picture password, PIN and fingerprint in Windows 8 Encrypting File System in Windows 2000 and later SQL Server Transparent Data Encryption (TDE) Service Master Key encryption Internet Explorer 7, both in the standalone version available for Windows XP and in the integrated versions available in Windows Vista and Windows Server 2008 Microsoft Edge Windows Mail and Windows Live Mail Outlook for S/MIME Internet Information Services for SSL/TLS Windows Rights Management Services client v1.1 and later Windows 2000 and later for EAP/TLS (VPN authentication) and 802.1x (WiFi authentication) Windows XP and later for stored user names and passwords (aka Credential Manager) .NET Framework 2.0 and later for System.Security.Cryptography.ProtectedData Microsoft.Owin (Katana) authentication by default when self-hosting (including cookie authentication and OAuth tokens) References External links Le fonctionnement de DPAPI par Processus Thief (FR) Windows Data Protection API (DPAPI) white paper by NAI Labs Data encryption with DPAPI How To: Use DPAPI (User Store) from ASP.NET 1.1 with Enterprise Services System.Security.Cryptography.ProtectedData in .NET Framework 2.0 and later Discussion of the use of MS BackupKey Remote Protocol by DPAPI to protect user secrets The Windows PStore Microsoft application programming interfaces Cryptographic software Microsoft Windows security technology Windows 2000