Where does Windows keeps passwords?

[Ayubjon]

I wonder where does Windows (namely Windows 7) keeps a user password? The password that we enter when Windows starts. And how does it keep them? Are they encrypted? What is encryption algorithm?

Please share links to articles, videos where these questions are explained. Thank you in advance.

 

[tom982]

Hello Ayubjon and welcome to the forums

Where do I begin!

Windows passwords aren't encrypted, but they are hashed. The hashing algorithm is LM and NTLM. The passwords are stored in the SAM file:

%WinDir%\system32\config\SAM

This is actually a registry hive and can only be accessed by NT AUTHORITY\SYSTEM.

As an administrator, you can change the permissions of this registry hive and load it under HKLM, but I wouldn't recommend it. If you want to see your SAM file, there are much easier methods to do this.

Security Accounts Manager - Wikipedia, the free encyclopedia

Tom