Björn Reimer wrote:

> I'm using a different approach in my applications to store the pw
> on local computers: I'm saving the username/password combination
> in a extra file in a private home or in profile of the user. (Win)
>
> And I'm not storing it in readable format, but crypted (of course the
> key is inside the exe!)

That is a scheme I have also used but it only works well if the
decryption of the local store is only done using a key that is NOT
stored in the local application. The user's pass phrase is a good choice
for this.