diff --git a/src/Jackett.Common/Indexers/BaseIndexer.cs b/src/Jackett.Common/Indexers/BaseIndexer.cs
index 03625fe2d..a6c87bf7d 100644
--- a/src/Jackett.Common/Indexers/BaseIndexer.cs
+++ b/src/Jackett.Common/Indexers/BaseIndexer.cs
@@ -1,6 +1,9 @@
 using System;
 using System.Collections.Generic;
+using System.Diagnostics;
 using System.Linq;
+using System.Reflection;
+using System.Runtime.InteropServices;
 using System.Text;
 using System.Threading.Tasks;
 using AutoMapper;
@@ -154,8 +157,11 @@ namespace Jackett.Common.Indexers
         {
             if (jsonConfig is JArray)
             {
-                LoadValuesFromJson(jsonConfig, true);
-                IsConfigured = true;
+                if (!MigratedFromDPAPI(jsonConfig))
+                {
+                    LoadValuesFromJson(jsonConfig, true);
+                    IsConfigured = true;
+                }
             }
             // read and upgrade old settings file format
             else if (jsonConfig is Object)
@@ -166,6 +172,81 @@ namespace Jackett.Common.Indexers
             }
         }
 
+        //TODO: Remove this section once users have moved off DPAPI
+        private bool MigratedFromDPAPI(JToken jsonConfig)
+        {
+            var currentAssembly = Assembly.GetExecutingAssembly();
+            bool runningLegacyOwin = new StackTrace().GetFrames()
+                                        .Select(x => x.GetMethod().ReflectedType.Assembly).Distinct()
+                                        .Where(x => x.GetReferencedAssemblies().Any(y => y.FullName == currentAssembly.FullName))
+                                        .Where(x => x.ManifestModule.Name == "Jackett.dll" || x.ManifestModule.Name == "JackettConsole.exe")
+                                        .Count() == 2;
+
+            if (runningLegacyOwin)
+            {
+                //Still running legacy Owin and using the DPAPI, we don't want to migrate
+                logger.Debug("Running Owin, no need to migrate from DPAPI");
+                return false;
+            }
+
+            Version dotNetVersion = Microsoft.Extensions.PlatformAbstractions.PlatformServices.Default.Application.RuntimeFramework.Version;
+            bool isWindows = RuntimeInformation.IsOSPlatform(OSPlatform.Windows);
+
+            if (!isWindows && dotNetVersion.Major < 4)
+            {
+                // User isn't running Windows, but is running on .NET Core framewrok, no access to the DPAPI, so don't bother trying to migrate
+                return false;
+            }
+
+            LoadValuesFromJson(jsonConfig, false);
+
+            object passwordPropertyValue = null;
+            string passwordValue = "";
+
+            try
+            {
+                passwordPropertyValue = configData.GetType().GetProperty("Password").GetValue(configData, null);
+                passwordValue = passwordPropertyValue.GetType().GetProperty("Value").GetValue(passwordPropertyValue, null).ToString();
+            }
+            catch (Exception ex)
+            {
+                logger.Info("Attempt to source password from json failed: " + ex.ToString());
+                return false;
+            }
+
+            if (!string.IsNullOrEmpty(passwordValue))
+            {
+                try
+                {
+                    protectionService.UnProtect(passwordValue);
+                    //Password successfully unprotected using Microsoft.AspNetCore.DataProtection, no further action needed as we've already converted the password previously
+                    return false;
+                }
+                catch (Exception ex)
+                {
+                    logger.Info("Password could not be unprotected using Microsoft.AspNetCore.DataProtection, trying legacy: " + ex.ToString());
+
+                    try
+                    {
+                        string unprotectedPassword = protectionService.LegacyUnProtect(passwordValue);
+                        //Password successfully unprotected using Windows/Mono DPAPI
+
+                        passwordPropertyValue.GetType().GetProperty("Value").SetValue(passwordPropertyValue, unprotectedPassword);
+                        SaveConfig();
+                        IsConfigured = true;
+
+                        return true;
+                    }
+                    catch (Exception exception)
+                    {
+                        logger.Info("Password could not be unprotected using legacy DPAPI: " + exception.ToString());
+                    }
+                }
+            }
+
+            return false;
+        }
+
         protected async Task ConfigureIfOK(string cookies, bool isLoggedin, Func<Task> onError)
         {
             if (isLoggedin)
diff --git a/src/Jackett.Common/Jackett.Common.csproj b/src/Jackett.Common/Jackett.Common.csproj
index cf0e919d6..7c4d4be27 100644
--- a/src/Jackett.Common/Jackett.Common.csproj
+++ b/src/Jackett.Common/Jackett.Common.csproj
@@ -1,4 +1,4 @@
-<Project Sdk="Microsoft.NET.Sdk">
+<Project Sdk="Microsoft.NET.Sdk">
 
   <PropertyGroup>
     <TargetFrameworks>netstandard2.0;net452</TargetFrameworks>
@@ -121,9 +121,10 @@
     <PackageReference Include="CommandLineParser" Version="2.2.1" />
     <PackageReference Include="DotNet4.SocksProxy" Version="1.4.0.1" />
     <PackageReference Include="Microsoft.CSharp" Version="4.4.1" />
+    <PackageReference Include="Microsoft.Extensions.PlatformAbstractions" Version="1.1.0" />
     <PackageReference Include="MimeMapping" Version="1.0.1.12" />
-    <PackageReference Include="Newtonsoft.Json" Version="11.0.1" />
-    <PackageReference Include="NLog" Version="4.5.0-rc07" />
+    <PackageReference Include="Newtonsoft.Json" Version="11.0.2" />
+    <PackageReference Include="NLog" Version="4.5.5" />
     <PackageReference Include="YamlDotNet" Version="4.3.2-pre0473" />
   </ItemGroup>
 
diff --git a/src/Jackett.Common/Services/Interfaces/IProtectionService.cs b/src/Jackett.Common/Services/Interfaces/IProtectionService.cs
index 3d107c290..6d9ddb35d 100644
--- a/src/Jackett.Common/Services/Interfaces/IProtectionService.cs
+++ b/src/Jackett.Common/Services/Interfaces/IProtectionService.cs
@@ -4,5 +4,7 @@
     {
         string Protect(string plainText);
         string UnProtect(string plainText);
+        string LegacyProtect(string plainText);
+        string LegacyUnProtect(string plainText);
     }
 }
diff --git a/src/Jackett/Services/ProtectionService.cs b/src/Jackett/Services/ProtectionService.cs
index 737b1c2ac..b5780b82a 100644
--- a/src/Jackett/Services/ProtectionService.cs
+++ b/src/Jackett/Services/ProtectionService.cs
@@ -57,6 +57,16 @@ namespace Jackett.Services
             }
         }
 
+        public string LegacyProtect(string plainText)
+        {
+            return Protect(plainText);
+        }
+
+        public string LegacyUnProtect(string plainText)
+        {
+            return UnProtect(plainText);
+        }
+
         private string ProtectDefaultMethod(string plainText)
         {
             if (string.IsNullOrEmpty(plainText))