Article Edit Discuss

Recover forgotten Windows 7 password using Cain and Abel

You are not logged in so your IP address will be recorded in this page's edit history. You may login or create an account.

''Passwords are there for security reasons, but sometimes they can become a real burden when we forget them. If you're dealing with a Windows 7 PC that has a multi-user setup, and one user forgot his or her password, the most logical thing to do is just reset the user's password via an administrator account. Windows 7 does not have a feature for user account password recovery. For most instances, this seems to solve the problem right there and then. ''

''The catch is, upon resetting or removing the password for that certain user account, Windows 7 warns you (the administrator) that the particular user'' '''''"will lose all EFS-encrypted files, personal certificates, and stored password for websites or network resources".''''''' This means that if that user has encrypted files using Windows EFS-encryption, or has digital certificates for secure email, banking or securely identifying websites [e.g. http://its.virginia.edu/identity/certificate/ Personal Digital Certificates], all that information could be lost if the administrator resets the password for that user. If the user of the lost password confirms that he or she has encrypted files or personal certificates associated with that account, then what once was a simple "password-reset solvable" problem becomes a more complicated one. Enter Cain and Abel, a powerful password recovery tool for Microsoft Operating Systems.''

''Following the steps below gives you a fighting chance of getting out of this dilemma and recovering a forgotten Windows 7 password without compromising anything or anyone.''

== What is Cain and Abel Recovery Tool? ==
Cain and Abel is a recovery tool for lost passwords on the Windows platform. It additionally allows network administrators to check network security or home users to recover a range of saved network passwords. It is one of the best password recovery tools designed for Windows 2000, Windows XP and Windows Vista. It enables you to recover passwords in the local cache, wireless network keys, and other passwords on your system. This is one of the best tools in your computer's toolbox.

== Instructions ==
# Download and install the latest version of Cain and Abel. You can download the software for free [http://www.oxid.it/cain.html HERE].
# Disable any running antivirus software and turn off Windows firewall. Because Cain and Abel will try and get into the deep trenches of the Windows operating system and perform tasks that "normal" software wouldn't do, it will get the attention of antivirus software and the Windows firewall, and they prevent it from doing its thing. To turn the Windows firewall off, follow the steps below.
## Go to the Windows Control Panel.
## Choose the "System and Security" category.
## Click on the "Windows Firewall" option.
## Click on the "Turn Windows Firewall On or Off" option located on the left pane of the window.
## Select all the radio button that says "Turn off Windows Firewall".
# Open Cain and Abel.
# Click on the "Cracker" tab.[[File:cracker_screenshot.png|center]]<br>Click on the "LM & NTLM Hashes" from the categories listed in the left panel then click on the "Cross" button in the upper toolbox. [[File:cracker_lm hashes.png|center]]
# Select the "Import Hashes from Local System" radio button in the succeeding window then click "Next". The software will now display the list of Windows 7 user accounts. [[File:user_accounts_list.png|center]]
# Right-click on the username you wish to recover a password for. Look in the "NT Password" column. The cells without an "empty" value have passwords associated with them.[[File:brute_force_attack.png|center]]
# Go to Brute Force Attack > NTLM Hashes.
# Choose a Charset to extract the password from.
# Define the password length (if possible).
# Click the "Start" button. This will begin the password recovery process.
# Wait for the recovery process to complete. The password recovery time will depend on the length and the character variations in the password to be recovered. Obviously less complex passwords will be recovered faster. <br>When the recovery process has successfully completed, the recovered password will be displayed.[[File:pass_recovery_success.png|center]]

== Cain and Abel OXID PDF Manual ==
The makers of Cain and Abel have provided a comprehensive manual to guide users around the software's wide range of features. However, they did not officially produce a PDF document of the manual but instead made it available through their website. The manual can be viewed through this link: [http://www.oxid.it/ca_um/whnjs.htm HERE]

Although Cain and Abel is fairly old, it is a well-documented application. Beginners will not have a hard time finding resources online to learn how to use Cain and Abel. There are a lot of online programming forums and YouTube videos that discuss Cain and Abel's virtues, and give instructions for use.

== Tips, Tricks & Warnings ==
* This method of password recovery can only be used if there is still a way to get into the Windows Operating System, that is, if there is at least one administrator that can still log into the system.
* A brute force technique only works best when the password to be recovered has a maximum length of seven characters, and is composed of alphanumeric characters.
* If the password is greater than seven characters and is made up of more complicated combinations, then a brute force approach will require a lot more time to recover the password. (The password recovery also depends on the processing power of your PC.)

==Questions and Answers==

===Can Cain and Abel retrieve a password from an ICP address?===
''I have the ICP address from a Yahoo email account and need the password.''