How do I set up a windows account, so that Windows will accept any password to login. I want to create the illusion of security for the user. Where the user believes that there account is secure and has a password, when it actually has none. I am obviously operating under the assumption that I am an Administrator on the computer in question. How would I go about doing this?

  • 1
    Wow, what a unique and malicious question! I don't think you could do it as you described without really getting into Windows and making a mess of things. But, I think you could make a fake Windows logon, so its the illusion of logging on... Sep 1, 2013 at 18:04
  • 1
    @barlop the product certainly could be malicious, not necessarily that the intent of the OP is. And all it takes to get a good password is someone mistyping theirs once... I did upvote the question too, because although its a security issue, its a good question for both the concept and the vulnerabilities of users it could expose. Sep 1, 2013 at 18:45
  • 3
    This ranges from misguided through malicious to ethically and perhaps legally wrong. Don't do it.
    – Rory Alsop
    Sep 1, 2013 at 19:23
  • 1
    @AthomSfere but he isn't asking how to steal passwords when a user logs in / how to set up a replacement log in screen, (and i'm not sure that that the latter has even been done). He's asking along the lines of having a username where any password works. I suppose if one could replace the entire user account system /log in screen, then it would allow what he wants and could steal passwords that way, but I don't think that has ever been done, and really to get a password there's l0ftcrack or peter nordahl's offline nt.., but he wasn't asking about getting a password.
    – barlop
    Sep 1, 2013 at 20:50
  • 1
    @barlop but with he is asking, getting an un-hashed password is an arguably natural evolution of one of the likely vectors to hack windows the way he is asking... Sep 2, 2013 at 0:38

1 Answer 1


For Vista and newer you would need to write your own Credential Provider to be shown at the login screen along side the normal login.

For XP and older you need to write a new GINA interface, this in theory could replace the old login entirely (and that is one of the reasons why Vista and newer no longer uses GINA).

Any advice on how to do either of those is off topic for Super User, you would need to work on it on your own and when you get stuck go ask on Stack Overflow about the specific issue you are having creating your own implementation.

  • I'm sorry, but am I the only one who giggles a little when I read that as 'gina interface? XD
    – user201262
    Sep 4, 2013 at 0:39

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.