It is not clear to me how Windows Server 2008 R8 stores local account passwords. Is there any salt added or just NT hash is computed and stored?

The following article describes all the methods used by Windows 2008 (even Windows 2008 R2). http://technet.microsoft.com/en-us/library/hh994565.aspx I am not sure if I understand correctly that there is no salt?

1 Answer 1


The SAM database is stored as a file on the local hard disk drive, and it is the authoritative credential store for local accounts on each Windows computer. This database contains all the credentials that are local to that specific computer, including the built-in local Administrator account and any other local accounts for that computer. The SAM database stores information on each account, including the user name and the NT password hash. By default, the SAM database does not store LM hashes on current versions of Windows. No password is ever stored in a SAM database—only the password hashes. The NT password hash is an unsalted MD4 hash of the account’s password. This means that if two accounts use an identical password, they will also have an identical NT password hash.

In short, unsalted MD4.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.