SecureString Sample

Program.cs

using System;
using System.Security;

namespace Sample07_SecureString
{
    class Program
    {
        static void Main(string[] args)
        {
            SecureString secString = new SecureString();
            string samplePass = "ZAQ!2wsx";

            Console.WriteLine("Secure String Sample..");
            Console.WriteLine("Password : " + samplePass.ToString());

            if (!string.IsNullOrEmpty(samplePass))
            {
                SecureStringExtension miscObj = new SecureStringExtension();

                //Güvensiz değeri güvenli stringe dönüştür
                secString = miscObj.convertToSecureString(samplePass);

                //samplePass nesnesini temizle
                samplePass = String.Empty;

                //Sonuç
                Console.WriteLine("Password converted to Secure Password : " + secString.ToString());
                Console.WriteLine("Cleared actual Password : " + samplePass.ToString());

                //Güvenli değeri decrypt yap
                samplePass = miscObj.convertToUNSecureString(secString);

                //Decrypt yapılmış değeri göster
                Console.WriteLine("Copied Un Secured password from Secure Password :" + samplePass.ToString());

                Console.ReadKey();
            }
        }
    }
}

SecureStringExtension.cs

using System;
using System.Runtime.InteropServices;
using System.Security;

namespace Sample07_SecureString
{
    public class SecureStringExtension
    {
        public SecureString convertToSecureString(string strPass)
        {
            var secureStr = new SecureString();
            if (strPass.Length > 0)
            {
                foreach (var c in strPass.ToCharArray()) secureStr.AppendChar(c);
            }
            secureStr.MakeReadOnly();

            return secureStr;
        }

        public string convertToUNSecureString(SecureString secstrPassword)
        {
            IntPtr unmanagedString = IntPtr.Zero;
            try
            {
                unmanagedString = Marshal.SecureStringToGlobalAllocUnicode(secstrPassword);
                return Marshal.PtrToStringUni(unmanagedString);
            }
            finally
            {
                Marshal.ZeroFreeGlobalAllocUnicode(unmanagedString);
            }
        }
    }


}