Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

If I check the checkbox remember my password on SecureCRT which file does SecureCRT write my username and password to?

share|improve this question

In SecureCRT Version 7.2, session ini files are stored here:


The default.ini file starts as follows:

S:"Login Script V2"=
D:"Session Password Saved"=00000000
S:"Monitor Username"=
S:"Monitor Password"=
D:"Is Session"=00000001
S:"Protocol Name"=SSH2
D:"Request pty"=00000001
S:"Shell Command"=
D:"Use Shell Command"=00000000
D:"Force Close On Exit"=00000000
D:"Forward X11"=00000000
S:"XAuthority File"=
S:"XServer Host"=
D:"XServer Port"=00001770
D:"XServer Screen Number"=00000000
D:"Enforce X11 Authentication"=00000001
D:"Request Shell"=00000001
D:"Max Packet Size"=00001000
D:"Pad Password Packets"=00000001
S:"Sftp Tab Local Directory"=C:\Users\{yourname}\Documents
S:"Sftp Tab Remote Directory"=
S:"Firewall Name"=None
D:"Allow Connection Sharing"=00000000
D:"Disable SFTP Extended Commands"=00000000
D:"[SSH2] Port"=00000016
S:"Key Exchange Algorithms"=gss-group1-sha1-toWM5Slw5Ew8Mqkay+al2g==,gss-gex-sha1-toWM5Slw5Ew8Mqkay+al2g==,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1
S:"Cipher List"=aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,twofish-cbc,blowfish-cbc,3des-cbc,arcfour
S:"MAC List"=hmac-sha2-512,hmac-sha2-256,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,
S:"SSH2 Authentications V2"=password,publickey,keyboard-interactive,gssapi
S:"Compatibility Mode V2"=Auto Detect
share|improve this answer

Well, it may vary within versions, but the one I know (v. 6.5.1) stores the username and password inside the .ini file for each session saved in the directory \Program Files\SecureCRT\config\Sessions.


But it stores the password encripted.

share|improve this answer
Wish putty would save to a config file instead of the registry. – mdpc Jan 9 '13 at 17:32
is it hash or just encryption? if it is a encryption which version is this? – SES Jan 9 '13 at 19:17
According to this post, it is an encryption, but VanDyke won't "offer a mechanism to 'decrypt' stored passwords". That is, they won't tell what encryption algorithm they use. – Adriano P Jan 10 '13 at 19:11
thank you for your answers. Did you realize that all passwords begin with u? and if your password is the same in an other computer you can just change the host name in .ini file, than you can login. i think there is a step i missed. – SES Jan 11 '13 at 15:32
-1: The default SecureCRT configuration storage directory on Windows has changed, per mysteryna's answer. – Warren Young Jun 26 '15 at 13:32

Here is how to recover saved passwords, which is basically what the author was looking for:

1. Install "Roboform"
2. Edit the connection of the lost password, and change the username (copy and paste first if you don't want to damage the original connection)
3. Connect to host - this will fail because the username doesn't match password
4. The SecureCRT prompt show up with the password pre-filled
5. Click the Roboform "SAVE" button, connect again, and Roboform creates a new passcard for you with the password in plain text.
6. Click the "Edit" in roboform to see the password
share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .