The ini file setting would look something like this:
DBPassword=h+ip7OhzSaBK1TmcOo3bMWRJYWyuc6CqcPYBWb7Mkkw=
The CrypterObject encryption functions produce a blob so if your app is updating the ini file password, you need to use CoderObject to convert it into a Base64 string. To decode the string, you would use CoderObject to convert the Base64 string back to a blob and feed that into CrypterObject to get the unencrypted password.
If you are worried about spy software reading app memory, do the conversion in local variables so that the unencrypted value doesn't hang around in memory. Then blank out sqlca properties after the connection is made.