TLDR: Use an instance of IServiceProvider gotten from your Package to gain access to a SettingsManager, which grants access to a WritableSettingsStore that you can easily wrap to store data in the DPAPI protected area of your users' registry.