Home > Products > Windows Passwords > Reset Windows Password > Screenshots > Reset SYSKEY security
Reset SYSKEY security (with user passwords re-encryption)
24.06.2019
Reset Windows Password v9.3
Support for Windows 10 1903, Trusted Boot Auto-Logon, Microsoft Edge Dev ...
11.06.2019
New article
DPAPI security flaw in Windows 10
10.06.2019
Windows Password Recovery 11.7
Support for Windows 10 1903, Trusted Boot Auto-Logon, etc.
24.05.2019
Wireless Password Recovery v6.0.1
New GPU engine and automated multi-mode for recovery

Articles and video

You may find it helpful to read our articles on Windows security and password recovery examples. Video section contains a number of movies about our programs in action

Reset Windows Password: SYSKEY reset

 

Selecting data source

Resetting SYSKEY encryption

First, you need to point to 3 registry hives: SAM, SYSTEM, and SECURITY. Usually, SYSKEY resides in your SYSTEM registry under HKLM\CurrentControlSet\Control\Lsa key. But once you set your SYSKEY for example to require a boot startup password and forgot it, there's no chance to boot up your system. Needless to say that SYSKEY is an extremely effective tool in the hands of a master. Setting your SYSKEY option to require a startup password or boot diskette is very effective against ANY(!) Windows password breaker. In that case, a password extractor program cannot decrypt your password hashes even if it gets a full access to your system.


 

Resetting SYSKEY

Resetting SYSKEY and zeroing out user passwords

Note! SYSKEY resetting is an unsafe operation that affects the whole system security. For example, after SYSKEY is reset, even if you can logon your system, you will not be able to decrypt your EFS-protected files.

There are a number of programs in the Net that proclaim they can reset SYSKEY. But none of them works correctly at the moment. The reason is that SYSKEY resetting requires a lot of additional operations for your system to prevent it from being broken. For example, you need also to zero out SAM domain session key(s), re-encrypt and reset local user hashes, LSA secrets, etc. Reset Windows Password has 2 algorithms for resetting SYSKEY. Once the primary one fails, another one runs. After SYSKEY is reset, all local user passwords will be set to blank automatically.

After resetting SYSKEY on a Windows 8 machine, you should change the password for every LiveID account to a non-empty one. Otherwise, you will not be able to logon the system with the empty password.