Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I was trying to understand the level of security offered by Windows picture passwords and ran across this claim on this website.

Some of our password recovery utilities already implement Windows 8 plain-text password decryption. The upcoming release of Windows Password Recovery is expected to have a full-fledged Vault analyzer and offline decoder.

I'm trying to understand what a plain text password is and if it is the default kind of password when I add a password to my account. My head is a bit muddled on this one so any clarification can help.

It seems there are passwords that can be decrypted and those that can't. What can be decrypted? Is the password I enter in Windows exposed?

share|improve this question
up vote 2 down vote accepted

In this context "plain text password" means the normal kind of password we've all used for years. lowercase, uppercase, symbols etc. But it's all text. Not pictures. As for why it can be decrypted, i assume they are using the same sort of tricks that have been around forever, rainbow tables and whatnot.

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .