keytar in Electron creates persistent keys in the Windows credential store

[Young-Lord]

Related app: Element
As mentioned in document, Element uses keytar to save database passwords in user machine.
These keys include some sensitive information (username & homeserver). They can be listed by cmdkey /list as picture below. They won't be clear after quitting deleting the app.

[crazy-max]

Hum right that's sad. Don't think Electron supports some kind of sandboxed credential store. Maybe we can add a specific label to an item being set in the credential store, encrypt it on disk (in portapp folder) when the portapp is closed and remove it by matching the created label.