Shoutbox

Where does WLM store passwords? - Printable Version

-Shoutbox (https://shoutbox.menthix.net)
+-- Forum: MsgHelp Archive (/forumdisplay.php?fid=58)
+--- Forum: Skype & Technology (/forumdisplay.php?fid=9)
+---- Forum: Skype & Live Messenger (/forumdisplay.php?fid=10)
+----- Thread: Where does WLM store passwords? (/showthread.php?tid=90259)

Where does WLM store passwords? by callistra on 04-19-2009 at 10:31 PM

Does anyone know where WLM 9 stores saved passwords when you opt for the program to remember you? I read somewhere that it stores it in the Credentials file but this isn't true because I tested it by deleting the entire Credentials folder and when I loaded WLM all the information was still there and my password recovery tool still found it somewhere.


RE: Where does WLM store passwords? by Lou on 04-19-2009 at 10:55 PM

A quick google search told me the password are stored in the registry via
HKEY_CURRENT_USER\Software\Microsoft\IdentityCRL\Dynamic Salt.

Not sure what to do with that myself, but yeah. Back it up before you delete just in case :P.


RE: Where does WLM store passwords? by Spunky on 04-20-2009 at 10:47 AM

quote:
Originally posted by nimicitor
It stores it in a part of the registry that you can't get to with Regedit.

You can access everything in RegEdit, thats kinda the point ^o)
RE: Where does WLM store passwords? by Spunky on 04-20-2009 at 01:19 PM

quote:
Originally posted by nimicitor
quote:
Originally posted by Spunky
quote:
Originally posted by nimicitor
It stores it in a part of the registry that you can't get to with Regedit.

You can access everything in RegEdit, thats kinda the point ^o)

There is a Secrets folder that is hidden in the registry.

I should hope not. AFAIK the only way to hide a reg key is to give it a name longer than 256 chars (I think)... Having hidden registry keys is a massive security threat as adware and spyware could easily hide it's own information from you.

The only over method I've heard of blocks the key being read via Win32 API, but not the native API, meaning Windows can still access it, but only Windows, so no risk...

If you could show me an article pointing to the existence of this key, it'd be much appreciated
RE: Where does WLM store passwords? by col32n on 04-20-2009 at 02:10 PM

I use Mail PassView v1.51  to view messenger and email passwords

http://www.colsearle.pwp.blueyonder.co.uk/mailpv.zip




RE: Where does WLM store passwords? by Spunky on 04-20-2009 at 04:29 PM

Fail. My password is missing characters.

Also, kinda proves my point though that they aren't kept in a secret place in the registry