wpf password box into a SecureString in C#

Question

I am attempting to get the data from a wpf password box into a secure string. How is that done? what i have so far:

 SecureString pass = new SecureString();         


        

Answer 1

Per MSDN:

When you get the Password property value, you expose the password as plain text in memory. To avoid this potential security risk, use the SecurePassword property to get the password as a SecureString.

You should avoid using the Password property unless you absolutely need a plaintext version of the string. In this case, retrieve the SecureString directly.