Is Microsoft Account Password Locally Cached in Windows 8?

When you successfully log in to Windows 8 with a Microsoft account, the logon credentials of your Microsoft account are cached locally on your computer. If you then disconnect that computer from the network and try to log on, Windows will authenticate your password locally using the cached credentials. The main advantage of a cached logon credentials is that users can also log on to their computer without Internet connection.

The cached logon credentials of Microsoft account are stored in your Windows SAM registry hive (c:\windows\system32\config\sam). To view the credentials, follow these steps:

1. Press Windows + R key combination to bring up the Run box. Type regedit and press Enter.
2. When the Registry Editor opens, navigate to HKEY_LOCAL_MACHINE\SAM. By default, this subkey appears as empty. To expand this subkey, right-click on the SAM key and select Permissions, this will open the Permissions dialog for that subkey. Click the Administrators group and grant Full Control privileges.
3. Expand the SAM subkey and navigate to the subkey: HKEY_LOCAL_MACHINE\SAM\SAM\Domains\Account\Users\000003E9. Here 000003E9 is the RID of my Microsoft account and it may be different in your side.

   

4. On the right panel, you can find the CachedLogonInfo value, which stores the login credentials of your Microsoft account. But you can’t see the clear-text password because it is encrypted.

How Long Does Windows Cache Microsoft Account Password?

The cached logon credentials will never expire itself. If you change your Microsoft account password online via https://login.live.com, the cached logon credentials won’t update until you successfully log in to Windows 8 with the new password. After you have successfully logged in to Windows 8 with the new password, you cached logon credentials are updated.

However, after changing your Microsoft account password online, if you never use the new password to log in to Windows 8, the cached logon credentials are not updated, even if your computer has Internet connection. In such situation, you can still log in to Windows 8 using your old password. The system will always check your password against the cached logon credentials firstly. If it doesn’t match, it then checks your password online when your computer has Internet connection.

Is It Secure to Use Microsoft Account to Log in to Windows 8?

The cached logon credentials is the last logged-on password used for your Microsoft account. It is a significant security risk. If your computer ends up in the wrong hands, an attacker can run a brute force attack to find out the local cached Microsoft account password.

However, there is not any password cracking software out there which can support this type of account, that is because Microsoft account is a completely new thing to users, and Microsoft account password is encrypted using much stronger encryption algorithms than local user account password.

To reduce the security risk, it’s better to use a strong Microsoft account password. It’s also recommended to log in to your Microsoft account online and set up the security information, including alternate email addresses, your phone numbers, security questions and trusted PCs. This can help you reclaim your account when your Microsoft account is hacked.

How to Log in to Windows 8 After Forgetting Microsoft Account Password?

What to do if you forgot your Microsoft account password? The easiest way is to reset your password online via Microsoft’s website, but it requires you to provide the security information that is associated with your Microsoft account. If you’re unable to verify the security information, you can also access your computer by replacing the cached logon credentials of your Microsoft account.

PCUnlocker is a powerful Windows password reset utility which can run from a bootable CD or USB drive. After booting from PCUnlocker Live CD/USB drive, simply choose the local user account which is linked to your Microsoft account, and then click on “Reset Password”. The program will replace the cached logon credentials on your local computer, so you can then log back into Windows 8 with a new password.

I just switched over from Windows XP to Windows 8 and for some reason. But now I can’t remember The password that I used for Microsoft account. Is there any way to recover or reset the Microsoft account password so I can regain access to my computer?

Lost or forgot your Microsoft account password? Windows 8 allows you to sign in to your computer using either a Microsoft account or a local user account. If you have forgotten the password for the Microsoft account that you use to log in to your Windows 8 computer, it seems to be impossible to hack into your computer. In this article we’ll show you two methods to help you reset lost Microsoft account password in Windows 8.

Method 1: Reset Lost Microsoft Account Password Online

If you’re using a Microsoft Account instead of a local user account, you can reset your password online if you forget it. To do so, visit the Reset Your Password page on Microsoft’s website. Enter your account’s email address and enter the CAPTCHA code to confirm you’re a human being, not a robot.

There are a number of ways to receive a reset link, including via email to the address associated with your account, a code sent via SMS message to a phone you’ve associated with your account, and a PC you’ve trusted to access your Microsoft account.

When the password is reset, you will be able to use your Microsoft account with the new password to sign in to your Windows 8 computer. Make sure the Windows 8 computer is connected to the Internet before you attempt to sign in.

Method 2: Reset Lost Microsoft Account Password with Boot Disc

There are tons of password recovery boot discs available on the internet which can help you recover or reset lost Windows local account password. But they don’t support Microsoft account password recovery at all, except the Reset Windows Password utility.

Reset Windows Password utility basically boots off from a WinPE disc and hack into the SAM database that stored the password hash of Microsoft account and reset your account’s password from there. Let’s see how can use it to reset your forgotten Microsoft account password in Windows 8:

1. First, you need to find an alternative computer in order to make a bootable Live CD. Download the Reset Windows Password utility and save it on the computer. Unzip the download file and you’ll get an ISO image file called ResetWindowsPwd.iso. Burn the ISO file to a blank CD (or USB flash drive) using ISO2Disc program.
2. Next, insert the Live CD into your locked Windows 8 computer and boot the computer from it. If you don’t know how to set your computer to boot from CD, please refer to your computer’s manual or check out this guide: How to Boot A Computer from CD or USB Drive.
3. The computer will load the mini operating system inside the Live CD and open up the Reset Windows Password window as follow.

   

4. From the window, you can see a list of local user accounts existing in your Windows 8 installation. For dual-boot or multi-boot computer, make sure you choose your desired Windows SAM registry hive from the drop-down list.
5. Choose the local user account which is linked to your Microsoft account, and then click on Reset Password button. The program will assign a new password (Password123) to your Microsoft account.
6. Remove the Live CD and restart the computer, you can then log in to your Windows 8 Microsoft account using the new password: Password123

Note: This Live CD only replaces the password hash of your Microsoft account which is cached on the local computer, so you can log in to your Windows 8 PC using a new password. It doesn’t reset your online account password.