title: Do I need to store key for CryptUnprotectData and CryptProtectData?
body: <p>DPAPI has 2 functions: <code>CryptUnprotectData</code>and <code>CryptProtectData</code>. 
  <br>I read <code>They do the encryption or decryption by using a session key that the function creates by using the user's logon credentials.</code> Does that mean that I do not need store this key anywhere and they will created when I want encrypt or decrypt data?
  <br>Also I found <code>An important point to remember is that DPAPI merely applies cryptographic protection to the data. It does not store any of the protected data; therefore applications calling DPAPI must implement their own storage of the protected data.</code> Is this about the key or a file what was encrypted?</p>