Common Practice regarding Passwords in Memory

Question

I am writing a .net(C#) windows application to store user passwords in it, like keypass, lastpass, roboforms etc.

To process the user data i have to keep it in memory this data also contains Passwords of the user.

Now my Questions are:

1. Can someone read the Memory Data using some tool or memory dump?
2. If yes then How? Can someone share such tool? i tried with CurrProcess, HeapViewer,ProcessExplorer and ProcessView applications but can't find any private data in memory dump,
3. Do I need to learn something else to ensure the protection of in memory passwords.

Thanks

Answer 1

You are correct in your concerns, strings in memory are not safe.

You're probably looking for the SecureString class.