I need some accurate information about how Windows 8 and Windows 10 perform hashing user account passwords.

I know that they are stored in SAM file and NTLMv2 algorithm is used. But while using some utilities like pwdump I don’t understand for example why Windows 8 output looks something like:

<account name>: id NO PASSWORD: ***** :<hash>

and for Windows 10:

<account name>: id <hash1> :<hash2>.

Is there some good and accurate explonation of how these systemes hash user account passwords?

  • Can you be a bit more specific about what you mean by using pwdump? There are a lot of tools just called pwdump or tools that have a pwdump command – Mr. E Jan 23 at 18:51
  • @Mr.E, i have used tool from this site: tarasco.org/security/pwdump_7. – Setplus Jan 23 at 19:05
  • 1
    As a best practice, please update the original question as clarification questions/answers are added to comments. It helps others jump into the problem with a lower barrier to entry. – primohacker Jan 23 at 19:35
  • @primohacker, okay, i am a beginner, sorry) will do my best! – Setplus Jan 23 at 19:37
  • No worries, it’s just helpful. – primohacker Jan 23 at 19:37

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.