DPAPI Encryption/Decryption

DPAPI-Encryption.ps1

function Get-DpapiEncryptedValue([string] $valueToEncrypt) {
    Add-Type -AssemblyName System.Security
    $clearBytes = [System.Text.Encoding]::UTF8.GetBytes($valueToEncrypt)
    $encryptedBytes = [System.Security.Cryptography.ProtectedData]::Protect($clearBytes, $null, [System.Security.Cryptography.DataProtectionScope]::LocalMachine)
    return [System.Convert]::ToBase64String($encryptedBytes)
}

function Get-DpapiDecryptedValue([string] $valueToDecrypt) {
    Add-Type -AssemblyName System.Security
    $clearBytes = [System.Convert]::FromBase64String($valueToDecrypt)
    $decryptedBytes = [System.Security.Cryptography.ProtectedData]::Unprotect($clearBytes, $null, [System.Security.Cryptography.DataProtectionScope]::LocalMachine)
    return [System.Text.Encoding]::UTF8.GetString($decryptedBytes)
}