It is not clear to me how Windows Server 2008 R8 stores local account passwords. Is there any salt added or just NT hash is computed and stored?

The following article describes all the methods used by Windows 2008 (even Windows 2008 R2). http://technet.microsoft.com/en-us/library/hh994565.aspx I am not sure if I understand correctly that there is no salt?

1 Answer 1


The SAM database is stored as a file on the local hard disk drive, and it is the authoritative credential store for local accounts on each Windows computer. This database contains all the credentials that are local to that specific computer, including the built-in local Administrator account and any other local accounts for that computer. The SAM database stores information on each account, including the user name and the NT password hash. By default, the SAM database does not store LM hashes on current versions of Windows. No password is ever stored in a SAM database—only the password hashes. The NT password hash is an unsalted MD4 hash of the account’s password. This means that if two accounts use an identical password, they will also have an identical NT password hash.

In short, unsalted MD4.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .