A SecureString is safe as global application variable? : <p>I have a an application with a first screen for the login. The password is entered in a password textbox, which is a secure string.</p>

<p>My idea it is store this SecureString in a global application variable because I will need it in some actions, so I would like to avoid the user has to write the password each time. One action could be send an email, I need the user and the password, so I don't want the user write the password of the email acount each time he wants to send and email.</p>

<p>I have read some posts and I know that at the end I will need the plain text from the secureString and this is the weak point, so the beset solution it is to reduce the time that the plain text is in memory. <a href="https://stackoverflow.com/questions/818704/how-to-convert-securestring-to-system-string/33679932#33679932">Some solutions can be found here</a>.</p>

<p>But my question is, how the global variable is a secureString, is it safe meanwhile it is not decode? If it is not a good option, there are another options that would be better but without the need the user type the password each time an action needs the password?</p>

<p>Thanks.</p>
