SecurityXploded.com
IE Password Decryptor : Internet Explorer Password Recovery Tool
 
 
IEPasswordDecryptor
 
 
See Also
 
 
 
 
Contents
 
 
About
IE Password Decryptor is the FREE software to quickly and easily recover all the stored passwords from Internet Explorer.

It automatically detects the installed IE version and use appropriate technique to successfully decrypt all the stored passwords.


It can recover passwords from all versions of Internet Explorer starting from version 4.0 to latest version 10.0.


One of the unique feature of this tool is that it can recover passwords (from IE v7-v9) for popular websites without depending on the history.


It also presents 'IE History Manager' interface which not only displays the contents of IE history in detail but also provides the option to add/remove websites with ease.


For command-line version, check out our new tool - IE Password Dump. Command-line feature of IE Password Decryptor will be discontinued from next version.


It works on both 32-bit & 64-bit platforms starting from Windows XP to Windows 8.

 
 
 
Features
  • Recover Autocomplete and HTTP basic authentication passwords
  • Support all versions of Internet Explorer from v4.0 to v10.0
  • Presents both GUI and Command-line interface.
  • Smart mode - Automatically Recover Passwords for Popular Websites without depending on the history URLs.
  • Useful for Penetration testers and Forensic investigators.
  • Feature to reset the 'Content Advisor Password' of Internet Explorer
  • Export option to back up the decrypted password list to HTML/XML/Text/CSV file.
  • Includes 'History Manager' which displays websites stored in IE history along with option to add/remove entries
  •  'Add Website' option to add website link to existing IE history to help in recovering password for which website link is not present in IE history (applicable for IE v7-v9).
  • Includes Installer for assisting you in local Installation & Uninstallation.
 
 
How it Works?
Internet Explorer stores two type of passwords, Autocomplete and HTTP basic authentication based passwords. Autocomplete passwords are normal website login passwords such as email, forum websites. HTTP basic authentication password is the one which is required to login to website itself.
 
Internet Explorer below version 7 stores both Autocomplete and HTTP basic authentication passwords in the secure location known as 'Protected Storage'. Windows has introduced 'Protected Storage' to allow applications such as IE, Outlook to store the secrets securely in an encrypted format. Below is the registry location corresponding to the 'Protected Storage'.
HKEY_CURRENT_USER\Software\Microsoft\Protected Storage System Provider
With version 7 onwards IE has changed the location of password store to provide better security mechanism compared to existing 'Protected Storage'. Now IE stores all the Autocomplete passwords in below mentioned registry location in an encrypted format.
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IntelliForms\Storage2
The HTTP basic authentication passwords are stored in the 'Credentials store'. The 'Credentials Store' is newly introduced secret store mechanism by Windows and it is generally used to store the network login passwords. Its location is given below.
[Windows XP]
C:\Documents and Settings\[username]\Application Data\Microsoft\Credentials

[Windows Vista\Windows 7]
C:\Users\[username]\AppData\Roaming\Microsoft\Credentials
 

IE v10 (windows 8 only) onwards stores the passwords in Windows Vault or Credential Manager.


IEPasswordDecryptor automatically detects the IE version and correspondingly decrypt the username/passwords from the appropriate secret store.

For more detailed technical information on decrypting the passwords from IE store read the article on 'Exposing the Password Secrets of Internet Explorer'.

 
 
 
Installation & Uninstallation
IEPasswordDecryptor comes with Installer to assist in local installation and un-installation. It has intuitive wizard which guides you through series of steps in completion of installation.
 
At any point of time, you can uninstall the product using the Uninstaller located at following location (by default)
 
[Windows 32 bit]
C:\Program Files\SecurityXploded\IEPasswordDecryptor

[Windows 64 bit]
C:\Program Files (x86)\SecurityXploded\IEPasswordDecryptor
 
 
 
How to Use?
IEPasswordDecryptor is a portable application and can be run anywhere directly. It comes with both IE password manager as well as IE history manager feature.
 
Using IE Password Manager - GUI version
  • Launch the IEPasswordDecryptor on your local system.
  • It will automatically detect the Internet Explorer version and displays Autocomplete as well as HTTP basic authentication passwords.
  • You can double click on any of the displayed entry to visit the website directly for quick verification.
  • Next you can save the username/password list to HTML/XML/Text/CSV file by clicking on 'Export' button and then select the type of file from the drop down box of 'Save File Dialog'.
  • It also provides option to reset the IE content advisor password.
 
Using IE Password Command-line Version
 
Here is the simple usage of command line version
 
IEPasswordDecryptor.exe  "<output_file path>"
 
Here are some of the examples

//Writes recovered password to text file in current directory
IEPasswordDecryptor.exe  output.txt

//Writes recovered password to HTML file in current directory
IEPasswordDecryptor.exe  output.html

//Writes recovered password to XML file in current directory
IEPasswordDecryptor.exe  output.xml

//Writes recovered password to TEXT file
IEPasswordDecryptor.exe  "c:\my test\passlist"
 
 
It automatically detects the mode (HTML/XML/Text) by using the extension of the specified file (html/xml/text). By default (or if no extension is specified) it uses the TEXT mode. For more examples refer to Screenshot 2 below.
 
 
Using IE History Manager feature
  • After launching the IEPasswordDecryptor, click on 'IE History Manager' tab as shown in the screenshot 2 below.
  • It will display all the websites from IE history along with website link, website title and visited date.
  • You can use the Remove/'Remove All' button to remove either single or all websites from IE history.
  • Next you can save this history list to html file by clicking on 'Save to HTML' button.
  • Optionally, you can use 'Add website' button to add website link to existing IE history. This will help in recovering password for the website whose entry is missing from IE history. Because IE v7 - v9 require website link to recover the stored password.
 
 
Screenshots
Screenshot 1: IEPasswordDecryptor showing the decrypted username & passwords from Internet Explorer.
 
IEPasswordDecryptor showing the IE Secrets
 
 
Screenshot 2:  Using command-line version of IEPasswordDecryptor to recover the IE passwords.
 
IEPasswordDecrytor command line version
 
 
Screenshot 3:  IEPasswordDecryptor showing the history manager to view/add/remove the websites stored in IE history.
 
IEPasswordDecrytor showing the IE history
 
 
Screenshot 4:  Exported website username/password list in standard HTML format by IEPasswordDecryptor.
 
IEPasswordDecrytor showing the exported list
 
 
 
Release History
Version 6.5: 6th Jan 2014
New feature to generate password recovery report in CSV (Comma-Seperated Values) File Format.
 
Version 6.0: 15th July 2013
Mega release supporting password recovery from Internet Explorer 10 on Windows 8. Also fixed the Version display for IE 10.
 
Version 5.5: 27th Feb 2013
Fixed the random crash problem due to cmdline initialization. Added HTTP SSL Login links for Facebook & Twitter accounts.
 
Version 5.0: 27th Jan 2013
Added more popular website login links for Smart Password Recovery. Fixed the screen refresh problem.
 
Version 4.5: 14th Nov 2012
Introducing Smart Mode - Now it automatically recovers passwords for popular websites even though these links are not present in History. Duplicate entries are removed now. Improved UI with cool icon & banner.
 
Version 4.0 : 5th Apr 2012
Improved UI changes, Fixed issue with deletion of IE history, Enhanced HTML report.
 
Version 3.5 : 10th Feb 2012
XML based report generation in GUI/Command-line mode, Improved HTML reports etc.
 
Version 3.0 : 23rd Aug 2011
Presents command-line interface, improved user interface with new banner,  icons and better HTML report.
 
Version 2.1 : 28th Mar 2011
Added new logo, link for passwordforensics.com in about section and few bug fixes.
 
Version 2.0 : 9th Nov 2010
vibrant look & feel with new banner and refined interface. It includes the software update verifier to automatically check for new versions. Brings in Installer with 'Intuitive Setup Wizard' which allows you to locally install this software on your system.
 
Version 1.6 : 9th Mar 2010
This version presents the enhanced look & feel with cool button interface.
 
Version 1.5 :  15th Dec 2009
Support for Windows 7 version. Added functionality to display multiple account information for IE 6 autocomplete entries.
 
Version 1.0.1 :  1st Sep 2009
First public release of IEPasswordDecryptor supporting the recovery of sign-on passwords from all versions of Internet Explorer along with support for managing IE history. 
 
 
 
Download
FREE Download IE Password Decryptor v6.5

License : Freeware
Platform: Windows XP, 2003, Vista, Windows 7, Windows 8

Download
 
 
 
See Also