CredHistView is a free, portable app that can decrypt the CREDHIST file on your currently running system and decrypt the CREDHIST stored on an external hard drive.

CredHistView is a free, portable app that can decrypt the CREDHIST file on your currently running system and decrypt the CREDHIST stored on an external hard drive.

Every time you change the login password on your system, Windows stores the hashes of the previous password in the CREDHist file (Located in %appdata%\Microsoft\Protect\CREDHIST).

This tool allows you to decrypt the CREDHist file and view the SHA1 and NTLM hashes of all previous passwords you used on your system.

To decrypt the file, you have to provide your latest login password. You can use this tool to decrypt the CREDHIST file on your currently running system and decrypt the CREDHIST stored on an external hard drive.

CredHistView does not give you the option to see your password, so be sure to type it correctly.

Because of the nature of CredHistView, the download may be flagged as a false positive.

  Download