15

I have a list of credentials stored in my Windows Credential Manager. But I can't view those passwords. Is there any way to see those credentials?enter image description here

Improve this question
2
  • Is there a problem or something ? Why don't you just click on the arrow?
    – Devid
    Aug 26, 2014 at 12:20
  • @Devid The arrow doesn't reveal the passwords.
    – Jason C
    Mar 22 at 18:31

6 Answers 6

Reset to default
4

You could try Network Password Recovery tool from Nirsoft

Improve this answer
5
  • 1
    Tried that now. The password is not in plain text. This is what I got for each User - D81z8YUl,YHgArp[t12w9'$\QFgPNk%pJB`c1.feZhpouff9C:'eeGNfdlUXYFv#Fw)g"q$:KrY[gu-f6^?2jG3wUkC5|D+*WZT%dCVvlV(w!7sejK+p$wV]9Hj]bQ=xpWN%GXg3#&BH,Wx.'q7a~iGYe5b)D3MZK5;M_mUR&Rttd#J@!u_@,wD$JtlE1bvD~[;sgMet(N,$tul@$g.or*GqD@\qWbn
    – Kunal
    Aug 26, 2014 at 11:11
  • 1
    It depends. Some application store the password as plain text and some applications hash it.
    – Tomas Kubes
    Jul 10, 2018 at 10:28
  • 1
    FYI: Windows defender flags this with "This program has potentially unwanted behaviour."
    – Christopher Chase
    Aug 12, 2020 at 0:53
  • 3
    @ChristopherChase Windows defender flags any program that can potentially be used by a hacker as having "potentially unwanted behaviour". This includes many legitimate tools.
    – Tim Seguine
    May 31, 2021 at 7:35
  • Doesn't seem to work on Windows 10, just an empty list.
    – Jason C
    Mar 22 at 18:31
2

If you are a developer you could take advantage of this library to find your stored Windows Credentials. https://github.com/spolnik/Simple.CredentialsManager

Improve this answer
1

Windows has increased the security of passwords.

If you're in the "Windows Credentials" section of the Credential Manager, and if you expand any credential using the arrow, you'll find that asterisks are shown instead of the passwords, and I found no way to convince Windows to show the password itself on my computer.

If you open PowerShell and attempt to get the credential of some user using the Get-StoredCredential command, Windows will ask for the password of that account, which sort of defeats the purpose of getting the password.

To get at some of the passwords requires the Nirsoft program of CredentialsFileView, which can show most but not all passwords, but it requires entering the Windows login password into the program. I suggest sorting by the column of "Entry Type" in order to sort by password type. The interesting ones probably have the Entry Type of "Domain Password".

enter image description here

Improve this answer
1
+50

You could try to crack the passwords with mimikatz(GitHub):

  1. Download the ZIP file from the release page or from here
  2. Place it onto C: and extract the content
  3. Open powershell as an admin
  4. cd into the folder where the executable mimikatz.exe is placed
  5. Start mimikatz with mimikatz.exe
  6. Run these commands:
privilege::debug
token::elevate
sekurlsa::logonPasswords
  1. After these commands you get a list of credentials and there you should find your desired passwords.
Improve this answer
3
  • 1
    Your answer could be improved with additional supporting information. Please edit to add further details, such as citations or documentation, so that others can confirm that your answer is correct. You can find more information on how to write good answers in the help center.
    – Community Bot
    Mar 27 at 12:07
  • Totally worked, thanks. Chrome hates mimikatz and I had to fight a bit with Kaspersky, too, but once I got all that under control it did indeed list the credential passwords.
    – Jason C
    Mar 29 at 13:24
  • It is a bit a pain in the ass, but happy that it worked for you.
    – Sator
    Mar 30 at 9:57
0

Here's a single .cs file to print the password of a generic credential: https://github.com/KirillOsenkov/Misc/blob/c2e28fb9e37b7d115bead10a0bc7bfce5e1e4375/WindowsCredentialViewer.cs

I'm not redistributing a binary since reading credentials is a dangerous thing and you should verify what you run before you download a tool from the internet to read your passwords. Just add that single C# file to a new C# console app and run.

Improve this answer
1
  • 1
    Unfortunately "CredReadW" returns false for the password I'm trying to recover even if running the program as administrator...
    – nsimeonov
    Nov 15, 2020 at 1:57
0

For python see the keyring module (link) e.g:

pip install pywin32 keyring
python -c "import keyring;print(keyring.get_password('servicename', 'username'))"
Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.