Use Windows' own cryptographic store for passwords
As documented in
https://cwiki.apache.org/confluence/display/SVN/EncryptedPasswordStorage#EncryptedPasswordStorage-WindowsCryptographicServices, Subversion is able to store its passwords in a cryptographic store that Windows itself maintains. Could this be another option for WinSCP, as this closes the gap between having the passwords store somehow unencrypted anywhere and having them stored using an application specific master password?
https://cwiki.apache.org/confluence/display/SVN/EncryptedPasswordStorage#EncryptedPasswordStorage-WindowsCryptographicServices, Subversion is able to store its passwords in a cryptographic store that Windows itself maintains. Could this be another option for WinSCP, as this closes the gap between having the passwords store somehow unencrypted anywhere and having them stored using an application specific master password?