thank you for this help

Appreciate the effort. Downloaded installed tried several asteriks covered password and received the same reply paraphrasing here no password detected. Uninstalled.

#50 - The software is not a security risk of any magnitude at all. I carry a 52KB standalone program around on a USB stick that can reveal all the passwords etc. in the Protected Storage section of any user's registry. The information is already available!. It just requires a simple decryption tool to read and extract it. The "huge security risk" you mention is the dumb user who doesn't bother to RTFM and learn that such storage is not designed for (and does not promise) any significant level of security at all.

this is a huge security risk??
If that is true then so is a folder left open on your PC. Or a document in MY Documents that you don't want someone to read!
Think about it!! There are times when you DO NEED programs like this and, if by their mere existence they are a security risk then you are a fool. the program is NOT a security risk at all. As someone already pointed out, it may highlight how easy it is to reveal those passwords but it isn't exactly a security risk! The asterisk are just to cover you when typing a password say, when people are there or you are in an office or public place. They aren't some kind of high tech secure system!
As for Bladed Thoth's concerns in the review...what are you talking about???
so what if the author re-brands his software or uses two websites, similar names, two brands of the same program??
Maybe he just figured on having twice the search results power via google etc and shareware sites, for just one program. I think it is very poor of you to write such rubbish in your review as if the program really is some sort of 'dodgy' or security risk not even worth going near. I would hate to see you having your own software reviewed by yourself!
What a bunch of morons. I don't need this program but I at least feel I have the single brain cell it takes to realise it is useful in context and is in no way a danger or a security risk or any other stupid and crazy notion I read in these comments. And lastly...if symantec sees it as a threat then that must make it a VIRUS right?
Symantec sees everything as a threat and, if you stopped, put your brain into gear for one second, realise this: If a program reveals passwords then of course an over excitable security program will see that as a threat!
Durrh.

I'm waiting for an app that will reveal lost passwords (i.e. logon) outside of using John the Ripper, Cain & Abel, and others. Just something that can be used after someone has logged onto another account (an administrator) and he can retrieve lost password for other users. Hmmm.... any ideas?

You can find plenty of password recovery utilities for free. Check out some of these. http://www.nirsoft.net/utils/index.html#password_utils

I'm suprised no one has mentioned SIW.exe which is a freeware tool.

If you run it, it will tell you everythiIng about your pc, and has a "secrets" tab that shows all your passwords AND the product keys for your software.

If you have SIW, you don't need anything else to examine the guts of your pc.

I agree 100% with Bladed Thoth: I had trouble installing but once installed the interface was very simple to use. However, ALL my gazillions of passwords are online so had I known that it didn't work with either Firefox or IE, I wouldn't even have bothered. This program is useless unless you can't recall passwords on your system...and even then it apparently doesn't work with all apps.

Given Bladed Thout's 15 min review, I think I will pass on this one. Passwords are not something that I leave to any program that is associated with the OS or programs that offer to save your password and use a password manager.

Windows is as secure as you make it to be. If you password your logon, your passwords are safe. (Outlook stores encrypted passwords in the registry).
Masking password is done so that others can't see the password while YOU are using the machine. If you need basic security, just go to logon-screen when you are absent.

I've certainly had the use for this type of app many times before, mostly to retrieve outlook e-mail passwords (many given by the isp can't be changed from the initially random generated one). I haven't found any freeware options so thanks for Asterisk Key link, (and to GOTD).

I just jot down each one of my passwords on a different colored Post-It note and stick them all around my monitor screen. That way I never forget a password. (And it looks absolutely gorgeous!)

you dont really need this program, a good brain would do :), but you can always put it in your phone or pda or something better, this allows other ppl to see your passwords :s kinda useless to me. but thanks gaotd for trying.. :)

This software is a huge security risk. Anyone can get the password off your machine. Might as well just have a notepad file on your desktop named my passwords.

Hmm I don't like software like this, sorry GOTD. And #2 is completely correct! ... I mean, instead you could just print your passwords and keep them somewhere where no one has access too (a safe, for example).

I can tell from reading the description it's not for me :-). On a scale from 1 to 10, I give this title 5 points.

Oops my bad, I meant #39. My apologies # 37

It actually works with outlook and my FTP program. i do only have one password, so itll be of no help to me, i am just very suprised that it works

# 37 To use "Native" and "English" together is laughable to say the least. Did that put out your flame?

I tried Snadboy's Revelation a little over five years ago. Unless the program has changed, it "phones home" when you run it. (it triggered a firewall warning on the machine) That was enough to put me off it, since none of the documentation mentioned this "feature."

If you just need Internet Explorer passwords, try NirSoft's free IE PassView.

http://www.nirsoft.net/utils/internet_explorer_password.html

As big a security hole this program opens, it is sometimes useful to have a reminder of your password. I know I have many passwords what I always forget.

I know lots of freeware products that do the same as this though.

Downloaded the program and it didn't work. So when I removed Asterosls it took a little something with it that left my browser out of commission. It took some time to get things back in order. Maybe I just got a bad install, it happens

what are the steps to get my passowrds from the resgistry- I am pretty good with the registry and have never stumbled into my passwords..

I use sticky password but every once in a while i wish i could see the passowrd on sticky..I dont want this software to interefere with sticky in any way..will it?

I use Roboform also and haven't found anything better. I've also been able to use it on public terminals. I received a fully functional version free by paying with trialpay. I don't think the comment rating buttons are functioning properly. Several times yesterday and today when I've pressed the 'plus' rating, it has subtracted ratings instead of adding them. I've noticed this in the past also when I've bothered to rate.

I use Snadboy's Revelation - always free: http://www.snadboy.com/

#25, "insecure" and "unsecure" are synonyms. Next time leave the petty semantic flaming to the native English speakers.

Oooops .. not sure if I advised you that Asterisk Key [see previous] is free.

http://www.lostpassword.com/asterisk.htm

Today's GiveAway is not for me - a vastly superior product is available - read on!!

See below - this prog is so good that Symantec* see it as a threat:

* http://www.symantec.com/security_response/writeup.jsp?docid=2004-111015-4633-99&tabid=1

"Ariskkey is a program designed to recover passwords that have been saved and are hidden by asterisks. This program can be a security risk since it can be used to recover passwords that were thought to be hidden. "

http://www.lostpassword.com/asterisk.htm

"Asterisk Key shows passwords hidden under asterisks. Click here to download this free utility.

Features

"Uncovers hidden passwords on password dialog boxes and web pages
State of the art password recovery engine - all passwords are recovered instantly
Multilingual passwords are supported
Full install/uninstall support"

Personally I use Roboform on a removable USB flash drive.
I think simply removing the login info physically from the computer is about as secure as it gets.HAvig the "security" of passwords "encrypted" into ***'s then having an app installed on the same system which immediately can reveal them is sort of DUH....

Does anyone here remember a password revealer program from years ago that when activated-your cursor turned into a magic wand and you waved it across the ****'s and it revealed the password?

I thought that was an awesome lil app although I have lost it in my many computer changes.

Hmm! Well I guess the 'BladedToth' review says it all without further unnecessary comment. Unusual though for GAOTD to offer such inferior software in my experience. Never mind - you still rock (most of the time!)

Love, Light and Peace
JC

Firefox has ways of protecting the place where passwords are stored. When used properly, Firefox can be about as secure as Roboform or whatever. (See "master password" and "security devices" or "FIPS".) Most people leave this aspect of security turned off, for convenience.

If you choose to use something else like Roboform, because it is more convenient, then good for you. But don't badmouth Firefox for not having security.

If you have security turned off in Firefox, you can't blame Firefox for lax security.

Even Windows can be set to protect the password store that it uses.

If other programs store plain-text passwords in the registry, that's their fault, or yours for relying on them.

Perhaps this application will provide a wake-up call to people that the "default" security on their computers is no security at all.

#29 - ... this being entirely a user preference. Personally, I couldn't care less about passwords to web mail, web forums etc. and I'm happy to "recover" them from behind the mask. OTOH I wouldn't dream of having Windows "remember" bank account login details etc. Security is largely a personal matter, but should always be based on common sense - not software.

As mentioned in my review, I do offer a word of caution with this tool. Upon browsing the help file, I quickly find references to an application called KRyLack Password Decryptor (Instead of being titled Asterisks Password Viewer). If you go to KRyLack's page, you'll see their application is the same. While the websites have a lot in common, it is not clear if they are both indeed the same individual/group or separate individual/group selling Asterisks Password Viewer.

http://www.krylack.com/KLPassDecrypt/index.htm

Hello all! Today's 15-Minute Review is up! Check it out!

http://www.bladedthoth.com/reviews/15mrs/asterisks-password-viewer-v1-10-02/

Anything I might have typed was made unnecessary by #27. I know how to obtain information from the registry, leaving this program little (nothing?) to offer. Thanks!

#21. Point is you should have no passwords stored to mask period.
#26. Same thing really. What is not on your system can not be restored. I would recommend using Sticky Password or RoboForm, preferably run from a USB stick.

Isn't this a copy of the FREEWARE program ASTERISK that has been around for years?

http://www.nirsoft.net/utils/astlog.html

Re: comment #2, There are those who truly forget, and need this program, however, if one were determined to get the passwords from a computer, then they'll find a way. This program is similar to the older versions of "John The Ripper", which came in handy at the time. Some made-for-MS programs have an option to view the letters or the *s when entering passwords. Also, there are computer forensics professionals who can not only find passwords, but can find deleted data (passwords included), to retrieve data needed for legal prosecution. This GOTD program is a good one to have on hand, but maybe hide the link somewhere so that not everyone who has access to your computer can find it, or even know that it exists on your computer.
Thanks GOTD, for continued daily freebies!

#18 The word is "un-secure" not "insecure" which means it has some mental issues, and if you check you'll still find "Windows" out sells everyone else a few hundred thousand to one.

First of all if you're showing asterisks, then you're not cleaning out your cookies, temp files or temporary internet files which is a no no. In order to run this program on anothers computer you first have to get past the windows logon. Safe mode will permit you to do this as the admin, but not the user. Any system is only as secure as the depth of the pass word. So by deleting all of your junk in the trunk, others could never use this on you. :0)

or even easier #17 - to show passwords in Firefox.

Tools -> Options -> Security -> Show Passwords -> Show Passwords

Even better reason to use an external password manager like Sticky Password, RoboForm or KeePass.

I have used www.rekenwonder.com/revealer.htm for many years and it works well, best of all it's free and a whole 65KB and runs directly without needing to be installed.

though for free, This is not bad.

This program installer is asking Internet Access during installation (twice), I don't know why and therefore don't trust it.

For those interested here is a good alternative freeware:
http://www.lostpassword.com/asterisk.htm

#2, #3 - I know it's not emphasized in Windows Help, but it's important for users to realize that password "masking" by asterisks etc. is NOT intended to be a serious security measure. Its purpose is only to provide some protection from the casual evesdropper - not from somebody who might have access to the machine. The ability to see behind the asterisks is neither here nor there in terms of security.

#11, I've been using Snadboy's Revelation for years on XP. Works fine on Vista, too.

Doesn't Cain and Abel do this for you? As well as pwdump?

From Cain:

This feature of the program follows the same methodology used by Todd Sabin in his PWDUMP2 program to dump passwords hidden behind asterisks in password text-boxes. It uses the "DLL injection" technique to run a thread in the same security context of the Local Security Authority Subsystem process. The thread's executable code must first be copied to the address space of LSASS process and this requires an account with the SeDebugPrivilege user right. By default only Administrators have this right.

Once injected and executed the thread will run with the same access privileges of the Local Security Authority Subsystem; it loads the function "DumpBox" from Abel.dll which enumerates every password text-box present on the screen and dumps its text (the password) into a temporary file named boxes.txt. Finally, the content of this file is put on the screen and the temporary file is deleted.

more exactly #2 this program shows how lame and insecure Windows is

If you want to be able to recover forgotten (but visible as asterisks) passwords in Firefox, install the Web Developer toolbar . Use Forms -> Show Passwords to do the magic.

Ha, I'll defeat programs like this by resetting all my passwords to ***** (5 asterisks)


Oh damn,


Forget I said that ....

Thanks #9 for the heads up about snadboy’s revelation. Works well.

There are literally of dozens of freeware alternatives that perform the same or equivalent function. 2 minutes spent with google will give you more than enough to select from, to find one that meets your requirements.

For Starters:

freesoft411.com
downloadpipe.com
liewcf.com
supershareware.com
pcwin.com
download32.com

People worried about your website passwords being displayed to snoops on your computer - you can elect to not store passwords in the repositories for Internet Explorer and Firefox - and use another option such as Sticky Password, or RoboForm. This is a more secure alternative, as these "password revealers" will not work if the passwords are only entered once the user has gained access to the password "database" (and therefore has full access to your passwords anyway).

Come on! 15 bucks for a graphical interface to a simple programming operation? A flight simulation game with a 3D engine, artificial intelligence algorithms, flight formulas and 3d models for a number of planes etc. = much much much much more work, will cost around 30 bucks.

Mmm,.. Fair enough if you dont use a Password Generator. A Retrieval programme like this would be good, but i prefer to leave it all to my Trusty old "Robo-Form"