Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is there a specific location where the passwords are stored ?

Are they salted ?

share|improve this question
up vote 11 down vote accepted

Normally this is c:\windows\system32\config\SAM The passwords can be either LANMAN or NTLM. LANMAN does not use a salt and is extremely weak. On Windows XP and earlier LANMAN hashes are enabled by default. These do not use salting and are extremely easy to crack or lookup in a rainbow table. They should be disabled so the system uses NTLM hashes (which are salted). As of Windows Vista NTLM is enabled by default.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.