Hello Guys Today i am going to Explain the very basic things that you must know If you Want to become a Hacker or you are a Hacker (whatever be). In this Tutorial I will Explain you “Locations where the passwords are Saved in Windows Operating System”. Various readers of my blog asked me about where the passwords really stored in windows. So today I am going to Explain this where the password really stores…So Read on…
This Tutorial is Program Oriented Means Different Locations for Different Softwares and window components…
First of all You Need to Know that Most Of the Passwords are stored in Registry . So you Must Know How to access Registry … Also In Most of cases passwords are Encrypted so to decrypt you can google it for its decrypter….
Note: Windows Profile Means C:/Document and Settings/(user account)/application data
HOW TO ACCESS REGISTRY ??
1. Goto Start Menu.
2. Click on Run.
3. Type “regedit” (without quotes) in the Run Box .After that this Windows Opens . Now you are ready to see that.
LOCATIONS OF SAVED PASSWORDS !
# Internet Explorer 4.00 – 6.00:
The passwords are stored in a secret location in the Registry known as the “Protected Storage“.
The base key of the Protected Storage is located under the following key:
“HKEY_CURRENT_USERSoftwareMicrosoftProtected Storage System Provider”.
You can browse the above key in the Registry Editor (RegEdit), but you won’t be able to watch the passwords, because they are encrypted.
Also, this key cannot easily moved from one computer to another, like you do with regular Registry keys.
# Internet Explorer 7.00 – 8.00:
The new versions of Internet Explorer stores the passwords in 2 different locations.
1. AutoComplete passwords are stored in the Registry under
HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerIntelliFormsStorage2.
2. HTTP Authentication passwords are stored in the Credentials file under
Documents and SettingsApplication DataMicrosoftCredentials
, together with login passwords of LAN computers and other passwords.
# Firefox:
The passwords are stored in one of the following filenames: signons.txt, signons2.txt, and signons3.txt (depends on Firefox version)
These password files are located inside the profile folder of Firefox, in
[Windows Profile]Application DataMozillaFirefoxProfiles[Profile Name]
Also, key3.db, located in the same folder, is used for encryption/decription of the passwords.
# Google Chrome Web browser:
The passwords are stored in
[Windows Profile]Local SettingsApplication DataGoogleChromeUser DataDefaultWeb Data
(This filename is SQLite database which contains encrypted passwords and other stuff)
# Opera:
The passwords are stored in wand.dat filename, located under
[Windows Profile]Application DataOperaOperaprofile
# Outlook Express (All Versions):
The POP3/SMTP/IMAP passwords Outlook Express are also stored in the Protected Storage, like the passwords of old versions of Internet Explorer.
# Outlook 98/2000:
Old versions of Outlook stored the POP3/SMTP/IMAP passwords in the Protected Storage, like the passwords of old versions of Internet Explorer.
# Outlook 2002-2008:
All new versions of Outlook store the passwords in the same Registry key of the account settings.
The accounts are stored in the Registry under
HKEY_CURRENT_USERMicrosoftWindows NTCurrentVersionWindows Messaging SubsystemProfiles[Profile Name]9375CFF0413111d3B88A00104B2A6676[Account Index]
If you use Outlook to connect an account on Exchange server, the password is stored in the Credentials file, together with login passwords of LAN computers.
# Windows Live Mail:
All account settings, including the encrypted passwords, are stored in
[Windows Profile]Local SettingsApplication DataMicrosoftWindows Live Mail[Account Name]
The account filename is an xml file with .oeaccount extension.
# ThunderBird:
The password file is located under
[Windows Profile]Application DataThunderbirdProfiles[Profile Name]
You should search a filename with .s extension.
# Google Talk:
All account settings, including the encrypted passwords, are stored in the Registry under
HKEY_CURRENT_USERSoftwareGoogleGoogle TalkAccounts[Account Name]
# Google Desktop:
Email passwords are stored in the Registry under
HKEY_CURRENT_USERSoftwareGoogleGoogle DesktopMailboxes[Account Name]
# MSN/Windows Messenger version 6.x and below:
The passwords are stored in one of the following locations:
1. Registry Key: HKEY_CURRENT_USERSoftwareMicrosoftMSNMessenger
2. Registry Key: HKEY_CURRENT_USERSoftwareMicrosoftMessengerService
3. In the Credentials file, with entry named as “Passport.Net\*“. (Only when the OS is XP or more)
# MSN Messenger version 7.x:
The passwords are stored under
HKEY_CURRENT_USERSoftwareMicrosoftIdentityCRLCreds[Account Name]
# Windows Live Messenger version 8.x/9.x:
The passwords are stored in the Credentials file, with entry name begins with “WindowsLive:name=”.
# Yahoo Messenger 6.x:
The password is stored in the Registry, under
HKEY_CURRENT_USERSoftwareYahooPager
(“EOptions string” value)
# Yahoo Messenger 7.5 or later:
The password is stored in the Registry, under
HKEY_CURRENT_USERSoftwareYahooPager – “ETS” value.
The value stored in “ETS” value cannot be recovered back to the original password.
# AIM Pro:
The passwords are stored in the Registry, under
HKEY_CURRENT_USERSoftwareAIMAIMPRO[Account Name]
# AIM 6.x:
The passwords are stored in the Registry, under
HKEY_CURRENT_USERSoftwareAmerica OnlineAIM6Passwords
# ICQ Lite 4.x/5.x/2003:
The passwords are stored in the Registry, under
HKEY_CURRENT_USERSoftwareMirabilisICQNewOwners[ICQ Number]
(MainLocation value)
# ICQ 6.x:
The password hash is stored in
[Windows Profile]Application DataICQ[User Name]Owner.mdb (Access Database)
(The password hash cannot be recovered back to the original password)
# Digsby:
The main password of Digsby is stored in
[Windows Profile]Application DataDigsbydigsby.dat
All other passwords are stored in Digsby servers.
# PaltalkScene:
The passwords are stored in the Registry, under
HKEY_CURRENT_USERSoftwarePaltalk[Account Name].
Anonymous says
cant understand encryption
Anonymous says
Search the Decrypter on google for the Following Encryption method… You will surely Find It…Like md5 encryption etc..
Meghraj says
how to get it from registry……can’t understand …how to use decryptor…..
Anonymous says
thanks alot.
Lokesh Singh says
Ur Welcome Rahul… We are transfering our site to new domain so we are off for 3 to 4 days..
Enjoy Now We are Back..
Rahul says
thanks alot sir.. nice to see u back again..