Home > Products > Windows Passwords > Reset Windows Password > Screenshots > Reset SYSKEY security
Reset SYSKEY security (with user passwords re-encryption)
Reset Windows Password v9.7
Support for Windows 10 2004, virtual OS password recovery
Windows Password Recovery v13
With support for domain cached credentials
New article on Wireless Password Recovery
Using the program's intelligence to automate the password recovery process for wireless networks
Network Password Recovery Wizard v5.9
Minor enhancements recovering remote desktop passwords

Articles and video

You may find it helpful to read our articles on Windows security and password recovery examples. Video section contains a number of movies about our programs in action

Reset Windows Password: SYSKEY reset


Selecting data source

Resetting SYSKEY encryption

First, you need to point to 3 registry hives: SAM, SYSTEM, and SECURITY. Usually, SYSKEY resides in your SYSTEM registry under HKLM\CurrentControlSet\Control\Lsa key. But once you set your SYSKEY for example to require a boot startup password and forgot it, there's no chance to boot up your system. Needless to say that SYSKEY is an extremely effective tool in the hands of a master. Setting your SYSKEY option to require a startup password or boot diskette is very effective against ANY(!) Windows password breaker. In that case, a password extractor program cannot decrypt your password hashes even if it gets a full access to your system.


Resetting SYSKEY

Resetting SYSKEY and zeroing out user passwords

Note! SYSKEY resetting is an unsafe operation that affects the whole system security. For example, after SYSKEY is reset, even if you can logon your system, you will not be able to decrypt your EFS-protected files.

There are a number of programs in the Net that proclaim they can reset SYSKEY. But none of them works correctly at the moment. The reason is that SYSKEY resetting requires a lot of additional operations for your system to prevent it from being broken. For example, you need also to zero out SAM domain session key(s), re-encrypt and reset local user hashes, LSA secrets, etc. Reset Windows Password has 2 algorithms for resetting SYSKEY. Once the primary one fails, another one runs. After SYSKEY is reset, all local user passwords will be set to blank automatically.

After resetting SYSKEY on a Windows 8 machine, you should change the password for every LiveID account to a non-empty one. Otherwise, you will not be able to logon the system with the empty password.