About this question
What passwords are stored in Microsoft Windows? How can I know what passwords are saved on the computer?
What passwords are stored in Microsoft Windows? How can I know what passwords are saved on the computer?
Log in to share your answer and help other learners.
Log in to answerBest Answer · By JanBask Cyber Security Expert
Answered on Sep 23, 2022
Windows Credentials
Yes, there is a windows password store.
They are stored hashed within files in the c:WindowsSystem32Config directory. You will need the SAM and system files. However, a backup of these files may be stored in the Windows repair folder at c:WindowsRepair. SAM contains the hashed passwords, however they are encrypted using the boot key within the system file. If Windows is running and you need access to the locked files in the Config folder (for example you know the files in Repair are out of date), you can extract these files using regedit.
C:>reg.exe save HKLMSAM samThe operation completed successfully
C:>reg.exe save HKLMSYSTEM sysThe operation completed successfully
An alternative is to use tools such as Pwdump which can extract the hashes stored within the SAM/system files directly without the need to use regedit or manual decryption of the SAM using the boot key. Windows passwords may also be cached in memory. Windows Credentials Editor can extract these values in plain text from the Windows Digest Authentication package.
C:>wce -wWCE v1.3beta (Windows Credentials Editor) - (c) 2010,2011,2012 Amplia Security - by Hernan Ochoa (hernan@ampliasecurity com)
Use -h for help.testMYDOMAIN:mypass1234
NETWORK SERVICEWORKGROUP:testYou will need local administrator access to do all of the above, unless you can mount the partition from another machine to directly access the files in the first case. Network Credentials Network passwords are stored inside Windows Vault/Credential Manager:
Free tutorials and interview questions from industry experts — learn the skill, then get ready to prove it.
Step-by-step Cyber Security guides from industry experts
Common Cyber Security interview questions, answered
Guides, tips and career advice on Cyber Security from JanBask experts.
Cyber Security Ethical Hacker Roles and Responsibilities: What Do Ethical Hackers Actually Do?
What does an ethical hacker actually do? See the five-phase process, daily tasks, required skills, and where ethical hackers work.
Cyber Security Penetration Tester Roles and Responsibilities: What Does a Pen Tester Do?
Learn what a penetration tester does, including key roles, responsibilities, daily tasks, tools, skills, reporting, and…
Cyber Security GRC Analyst Roles and Responsibilities: What Does a GRC Analyst Do?
What does a GRC analyst actually do? See the core responsibilities, how they grow by experience level, a daily routine, tools,…
Cyber Security SOC Analyst Roles and Responsibilities: What Does a SOC Analyst Do?
What does a SOC analyst actually do? Explore core responsibilities, the Tier 1–3 structure, daily tasks, tools, and skills in…