begood Posted May 15, 2010 Report Posted May 15, 2010 About IEPasswordDecryptor IEPasswordDecryptor is the free tool to quickly and easily recover stored passwords from Internet Explorer. It can recover both Autocomplete and HTTP basic authentication based passwords from IE secret store. User can double click on any of the entry to visit the website which makes it easy to verify sign-on passwords. It also comes with distinctive feature which allows the user to reset the IE content advisor password in case user has lost it. It also presents 'IE history manager' interface which not only displays the contents of IE history in detail but also provides the option to add/remove websites with ease. User can save the displayed password list and IE history list to TEXT as well HTML file for offline verification & storage. IEPasswordDecryptor can recover passwords from all version of Internet Explorer starting from version 4.0 to latest version 8.0. Newer version presents the enhanced look & feel with cool button interface. Features of IEPasswordDecryptor Here are the salient features of IEPasswordDecryptor Recover Autocomplete and HTTP basic authentication based passwords from IE version 4.0 to 8.0Recover HTTP basic authentication passwords from IE version 4.0. to 8.0 Reset the content advisor password of Internet ExplorerExport option to save the decrypted password list to TEXT or HTML file.Displays websites stored by IE history along with option to add/remove entriesExport option to save the displayed IE history list to HTML file.Sort the password and history entries based on various fields by just clicking on the column header.Visit the website by directly double clicking on displayed entry. 'Add Website' option to add website link to existing IE history to help in recovering password for which website link is not present in IE history (applicable for IE version 7 or more). Internals of IEPasswordDecryptor Like most browsers, Internet Explorer also has the single sign-on feature which stores the username/password for already authenticated websites. Whenever user login to any website, IE prompts the user for consent to store the password for future use. If user acknowledges then username/password along with website link will be stored in IE secret store. So the next time onwards whenever user visits the same website, IE automatically populates the username/password field from its store thus preventing user from entering credentials every time. Internet Explorer stores two type of passwords, Autocomplete and HTTP basic authentication based passwords. Autocomplete passwords are normal website login passwords such as email, forum websites. HTTP basic authentication password is the one which is required to login to website itself. As soon as user tries to access the website, IE prompts with login dialog box asking for username/password. Generally proxy servers and router/modem configuration websites uses these kind of authentication mechanism. Internet Explorer below version 7 stores both Autocomplete and HTTP basic authentication passwords in the secure location known as 'Protected Storage'. Windows has introduced 'Protected Storage' to allow applications such as IE, Outlook to store the secrets securely in an encrypted format. Below is the registry location corresponding to the 'Protected Storage'. HKEY_CURRENT_USER\Software\Microsoft\Protected Storage System Provider With version 7 onwards IE has changed the location of password store to provide better security mechanism compared to existing 'Protected Storage'. Now IE stores all the Autocomplete passwords in below mentioned registry location in an encrypted format. HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IntelliForms\Storage2 Here is the screenshot of typical entries stored at this location Here each entry corresponds to a hash of the website for which username/password has been stored. So one must know the website login link to recover the password. In order to solve this problem, IEPasswordDecryptor uses the website list from the IE history and verifies if any of them matches with stored hash entry. So if a website link is not present in the IE history then the password for such stored website entry cannot be recovered. In such case you can use 'Add Website' option of IEPasswordDecryptor to add the website link to existing IE history as shown in the Screenshot 3 below. The HTTP basic authentication passwords are stored in the 'Credentials store'. The 'Credentials Store' is newly introduced secret store mechanism by Windows and it is generally used to store the network login passwords. Its location is given below. [Windows XP] C:\Documents and Settings\[username]\Application Data\Microsoft\Credentials [Windows Vista+] C:\Users\[username]\AppData\Roaming\Microsoft\Credentials IEPasswordDecryptor automatically detects the IE version and correspondingly decrypt the username/passwords from the appropriate secret store. For more detailed technical information on decrypting the passwords from IE store read the article on 'Exposing the Secrets of Internet Explorer'. Using IEPasswordDecryptor IEPasswordDecryptor is a standalone application which does not require any installation and can be directly run after copying to local system. It comes with both IE password manager as well as IE history manager feature. Using IE Password Manager feature Launch the IEPasswordDecryptor on your local system.It will automatically detect the Internet Explorer version and displays Autocomplete as well as HTTP basic authentication passwords. You can double click on any of the displayed entry to visit the website directly for quick verification. Next you can save the username/password list to text or html file by clicking on 'Save to Text' or 'Save to HTML' button.It also provides option to reset the IE content advisor password. Using IE History Manager feature After launching the IEPasswordDecryptor, click on 'IE History Manager' tab as shown in the screenshot 2 below.It will display all the websites from IE history along with website link, website title and visited date. You can use the Remove/'Remove All' button to remove either single or all websites from IE history. Next you can save this history list to html file by clicking on 'Save to HTML' button. Optionally, you can use 'Add website' button to add website link to existing IE history. This will help in recovering password for the website whose entry is missing from IE history. Because IE 7 & 8 require website link to recover the stored password. Here are some of the popular website links which you can add using 'Add website' option. [All Google websites, Gmail, Orkut etc] https://www.google.com/accounts/servicelogin[Digg] http://digg.com[Twitter] http://twitter.com[Linkedin] https://www.linkedin.com/secure/login[AOL] https://my.screenname.aol.com/_cqr/login/login.psp [Myspace] http://www.myspace.com[Amazon] https://www.amazon.com/gp/css/homepage.html [stumbleupon] Create Your Personal Account | StumbleUpon [slashdot] Slashdot Bookmarks[Reddit] reddit.com: login or register IEPasswordDecryptor in Action Here are the screenshots of IEPasswordDecryptor showing it in action... Screenshot 1: IEPasswordDecryptor showing the decrypted username & passwords from Internet Explorer. Screenshot 2: IEPasswordDecryptor showing the history manager to view/add/remove the websites stored in IE history. Screenshot 3: 'Add Website' option to add the website link to existing IE history. This helps in recovering password (only for IE version 7 or more) for the website whose entry is not present in the IE history list. Screenshot 4: Exported website username/password list in standard HTML format by IEPasswordDecryptor. History Version 1.6 : 9th Mar 2010 This version presents the enhanced look & feel with cool button interface. Version 1.5 : 15th Dec 2009 Support for Windows 7 version. Added functionality to display multiple account information for IE 6 autocomplete entries. Version 1.0.1 : 1st Sep 2009 First public release of IEPasswordDecryptor supporting the recovery of sign-on passwords from all versions of Internet Explorer along with support for managing IE history. Download IEPasswordDecryptor FREE Download IEPasswordDecryptor 1.6 License : Freeware Platform : Windows XP, 2003, Vista, Win7 Download Quote
