Scroll To Top

Enable Syskey To Protect Windows Against Local Password Cracking

Posted in Articles, Security, Windows3 years ago • Written by Shais14 Comments

Windows Operating System is weak against Local Password Cracking tricks. It is not only Windows, the other OS like Linux, Mac OS are also the same. But you can enable Syskey to protect Windows against local password cracking. By default Windows doesn’t protect the system from bring any changes to SAM database. In order to protect Windows from local password cracking, Microsoft had set the Syskey within Windows NT 4.0 SP3. The Syskey utility can encrypts the hashed password information in a SAM database in the Windows operating system using a 128-bit RC4 encryption key.

Enable Syskey To Protect Windows

When you enable Syskey on Windows, the system ask you the Syskey password before displaying Windows log on page. It seem like modern multi-factor authentication which Microsoft brought you a decade ago!

Syskey has the same configuration on all Windows. In order to enable syskey to protect windows, type “syskey” on Windows run and press enter. It will open syskey page and your must configure it.

Enable Syskey

Enable Syskey

On the Syskey (Securing the Windows Account Database) page click Update button. Before enabling Syskey, read the details and information on the pages.

Windows 10 Starup Key

Windows 10 Starup Key

Now on the Startup key select Password Startup and enter the password for syskey. The password must be strong enough to do not guess and crack easily. When don, just click OK.

Enable Syskey to Protect Windows

Enable Syskey to Protect Windows

When prompt that The account database Startup key was changed. Click OK and the syskey page will close. Don, the syskey enabled successfully.

Aftter enabling Syskey on your Windows, it will ask you the password key when Windows has starting up. This happen before displaying log on page of Windows. So till here you protect the log on page from bypassing Windows log in page tricks which we talked about on “Reset forgotten Windows Password” post.

To test the syskey, once restart your computer and see the start up password prompt at start up.

Startup Password

Startup Password

Just enter the password of syskey that you enabled before. Try to remember the password or write somewhere else. If you forgot the password you are not able to login to your System. It’s possible to bypass syskey password, but is time consuming and need some third party tools to reset password.

Any question? And feel free to ask us. We try to help you protect your system or suggest us an new tip for protecting Windows SAM Database.


TAGS: , , ,
About this Author
Shais

I’m a network and Information Security instructor. Here is my online pictorial notebook. I would like to write and share my experience through this website for computer enthusiasts and technology geeks.

Like us on Facebook
on Facebook
Shais

Follow me on Twitter
Follow @technigs on Twitter
Shais
Add me on Google+
on Google+
Shais

14 Comments so far. Feel free to join this conversation.

  1. RohullahApril 14, 2015 at 3:19 pm - Reply

    is it possible to crack this password?

    • Shais
      ShaisApril 14, 2015 at 3:44 pm - Reply

      Yes, It is possible to bypass it. But a bit difficult.

  2. PaulApril 12, 2016 at 5:29 pm - Reply

    Sir…looking for help.
    Am using Windows 10. I have set syskey password.
    It works only …if I restart computer.
    If i turn on (when computer was closed) syskey is not appeared, he doesnt ask for password.
    So it works only during restarting computer and then ask for password.
    Whats going on ?

    • Shais
      ShaisApril 12, 2016 at 6:54 pm - Reply

      Hi Paul,

      It works fine. The syskey only prompt for password when you want to turn on your system. It’s not work on sleep and hibernate mode.

  3. PaulApril 12, 2016 at 9:57 pm - Reply

    Hi Shais,
    thanks for support. Appreciate that.
    Thats unfortunately my biggest problem. When I had Windows 7, there were no problem regarding syskey.
    now when I changed system for Windows 10, always when I turn on my computer – syskey is not activated, is not asking for password.
    Syskey is activated only when I restart system and then ask for password. :(. No idea how to fix it.
    But many thanks for help

    • Shais
      ShaisApril 13, 2016 at 10:50 am - Reply

      Did you set startup password for Syskey.
      There is two options to set password for Syskey. First is Password Startup which require password when you start your computer. The second one is System Generated Password, that Store Startup Key Locally. This one is automatically generate password.

      Once try to set password for startup password and test.

  4. PmajewskiApril 13, 2016 at 2:11 pm - Reply

    Thank you for response..
    I have no idea how to check this option “startup password for syskey”.
    I do not see this detail in “options” when I set password.

  5. Paul MApril 13, 2016 at 7:24 pm - Reply

    exactly, the same options.
    So i Set Password startup – confirm new password and i receive information “password is set”…
    And It works only ….when restarting system…
    When I switch on computer It doesnt appear.

    • Shais
      ShaisApril 13, 2016 at 10:13 pm - Reply

      Good, it works fine. The Syskey is for startup not for switching between users.

  6. PaulApril 13, 2016 at 10:19 pm - Reply

    Shais – we did not understood correctly 😉
    Am not switching between users…
    I mean, syskey ask for password only if I restart system.
    But If I turn off computer, and then turn on computer syskey is not asking for password. Thats reason why am asking what’s going on.
    I was using previous Windows 7, XP, 2000, NT, and I had never such problems.

  7. SteveApril 20, 2016 at 5:48 pm - Reply

    Hi!

    I have the same problem. Syskey works only I restart, not working power on!

  8. Tobias De GroofJune 28, 2016 at 6:50 am - Reply

    That’s probably because fastboot is enabled in Windows 10, the computer doesn’t fully shut down.

  9. EricSeptember 16, 2016 at 5:17 pm - Reply

    Tobias has the correct answer.

Leave A Response