Web API doesn’t allow you to pass multiple complex objects in the method signature of a Web API controller method — you can post only a single value to a Web API action method.

The Data Protection API is easy to use and flexible. It’s a good choice for encrypting data, such as query strings and cookies, that will be secured and persisted for only a short period of time.