In a multi-user system using DPAPI [1] on windows protects secrets from other users, even if the disk is not encrypted. Secrets are encrypted with the user's password.

[1]: https://web.archive.org/web/20200830203837/https://docs.micr...