Lucky Bhumkar's Blog: Recover Lost Passwords Stored By Internet Explorer

Wednesday

Recover Lost Passwords Stored By Internet Explorer


IE PassView is a small password management utility that reveals the passwords stored by Internet Explorer Web browser, and allows you to delete passwords that you don't need anymore. It supports all versions of Internet Explorer, from version 4.0 and up to 9.0.

For each password that is stored by Internet Explorer, the following information is displayed:
  • Web address
  • Password Type
    • AutoComplete
    • Password-Protected Web Site
    • FTP
  • Storage Location (Registry, Credentials File, or Protected Storage), and
  • the user name/password pair. 
You can select one or more items from the passwords list and export them into text/html/csv/xml file.

TYPES OF PASSWORDS

IE PassView utility can recover 3 types of passwords:
  1. AutoComplete Passwords: When you enter a Web page that contains a form with user/password fields and a login button, Internet Explorer may ask you if you want to save the password, after pressing the login button. If you choose to save the password, the password is saved as AutoComplete password.
  2. HTTP Authentication Passwords: Some Web sites allow the user to enter only after typing user and password in a separated dialog-box. If you choose to save the password in this login dialog-box, the password is saved as HTTP authentication password.
  3. FTP Passwords: Simply the passwords of FTP addresses (ftp://...)  
DOWNLOAD
IE PassView In Zip file
Self-install executable for installing IE PassView with uninstall support

However, You can recover the passwords stored by Internet Explorer Manually

PASSWORD STORAGE LOCATION

Internet Explorer stores the passwords in different locations, depending on the version of IE, and the type of the password. You can handle registry location by pressing 'Win+R' key to start Run window and simple type 'regedit' in Run window.

1. PROTECTED STORAGE
The 'Protected Storage' is a special secret location in the Registry that was used to store all the passwords of Internet Explorer in versions 4.0 - 6.0

The Registry location of the Protected Storage was
HKEY_CURRENT_USER\Software\Microsoft\Protected Storage System Provider
Starting from version 7.0 of Internet Explorer, the Protected Storage is no longer used for storing passwords. 

2. REGISTRY (STORAGE2 KEY)
Starting from version 7.0 of IE, all AutoComplete passwords are stored in
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IntelliForms\Storage2 Registry key.
The passwords are encrypted with a key created from the Web site address, so it's not possible to get the password without knowing the Web site address. 

3. CREDENTIALS FILE
Starting from version 7.0 of IE, HTTP authentication passwords are saved in the Credentials file of Windows, together with other network/login passwords. The Credentials file is located in the following locations via Windows explorer:
  • Windows XP/2003
    •  [Windows Profile]\Application Data\Microsoft\Credentials\[User SID]\Credentials and [Windows Profile]\Local Settings\Application Data\Microsoft\Credentials\[User SID]\Credentials
  • Windows Vista
    •  [Windows Profile]\AppData\Roaming\Microsoft\Credentials\[Random ID] and [Windows Profile]\AppData\Local\Microsoft\Credentials\[Random ID]
IMPORTANT NOTE
Approx 55% antivirus scanner treat this application as malicious object due to its ability to reveal passwords which might cause for misuse of this this application. The software is provided "AS IS" without any warranty, either expressed or implied, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose. The author will not be liable for any special, incidental, consequential or indirect damages due to loss of data or any other reason.

Disclaimer

This blog contains freeware and shareware applications, we do not post any crack or serial. If any one have any complaints/ suggestions regarding this, please leave a comment to that post.