The Windows DPAPI essentially allows you to store encrypted information locally, that only you may decrypt. XDP (for eXtended DPAPI), offers the convenience of the DPAPI (no key management), but allows for the encryption of data to other local or domain, users or groups.