Applies ToWindows 11 Windows 10
Диспетчер учетных данных позволяет просматривать и удалять сохраненные учетные данные для веб-сайтов, приложений и сетей.
-
Чтобы открыть диспетчер учетных данных, введите диспетчер учетных данных в поле поиска на панели задач и выберите панель управления диспетчера учетных данных.
-
Выберите Учетные данные веб-сайтов или Учетные данные Windows для доступа к учетным данным, которыми вы хотите управлять.
Нужна дополнительная помощь?
Нужны дополнительные параметры?
Изучите преимущества подписки, просмотрите учебные курсы, узнайте, как защитить свое устройство и т. д.
Диспетчер учетных данных Windows (Credential Manager) позволяет безопасно хранить учетные записи и пароля для доступа к сетевым ресурсам, веб сайтам и приложениям. Благодаря сохраненным в Credential Manager паролям вы можете подключаться без ввода пароля к сетевым ресурсам, которые поддерживаются проверку подлинности Windows (NTLM или Kerbersos), аутентификацию по сертификату, или базовую проверку подлинности.
Содержание:
- Используем диспетчер учетных данных Windows для хранения паролей
- Управление сохраненными учетными данными Windows из командной строки
- Доступ к менеджеру учетных данных Windows из PowerShell
Используем диспетчер учетных данных Windows для хранения паролей
Диспетчер учетных данных встроен в Windows и позволяет безопасно хранить три типа учетных данных:
- Учетные данные Windows (Windows Credentials) — учетные данные доступа к ресурсам, которые поддерживаются Windows аутентификацию (NTLM или Kerbersos). Это могут быть данные для подключения сетевых дисков или общим SMB папкам, NAS устройствам, сохраненные пароли для RDP подключений, пароли к сайтам, поддерживающих проверку подлинности Windows и т.д;
- Учетные данные сертификатов (Certificate-Based Credentials) – используются для доступа к ресурсам с помощью сертификатов (из секции Personal в Certificate Manager);
- Общие учетные данные (Generic Credentials) – хранит учетные данные для доступа к сторонним приложениям, совместимым с Credential Manager и поддерживающим Basic аутентификацию;
- Учетные данные для интернета (Web Credentials) – сохранённые пароли в браузерах Edge и Internet Explorer, приложениях Microsoft (MS Office, Teams, Outlook, Skype и т.д).
Например, если при доступе к сетевой папке вы включите опцию “Сохранить пароль”, то введенный вами пароли будет сохранен в Credential Manager.
Аналогично пароль для подключения к удаленному RDP/RDS серверу сохраняется в клиенте Remote Desktop Connection (mstsc.exe).
Открыть диспетчер учетных данных в Windows можно:
- из классической панели управления (Control Panel\User Accounts\Credential Manager, Панель управления -> Учетные записи пользователей -> Диспетчер учетных данных);
- изкоманднойстроки:
control /name Microsoft.CredentialManager
На скриншоте видно, что в Credential Manager хранятся два пароля, которые мы сохранили ранее.
Сохраненный пароль для RDP подключения сохраняется в формате
TERMSRV\hostname
.
Здесь вы можете добавить сохранённый пароль, отредактировать (просмотреть сохраненный пароль в открытом виде из графического интерфейса нельзя) или удалить любую из записей.
Для управления сохраненными паролями можно использовать классический диалоговый интерфейс Stored User Names and Password. Для его запуска выполните команду:
rundll32.exe keymgr.dll,KRShowKeyMgr
Здесь вы также можете управлять сохраненными учетными данными, а также выполнить резервное копирование и восстановление записей в Credential Manager (можно использовать для переноса базы Credential Manager на другой компьютер).
Управление сохраненными учетными данными Windows из командной строки
Вы можете добавить удалить и вывести сохраненные учетные данных в Credentil Manager из командной строки с помощью утилиты cmdkey.
Добавить в диспетчер учетные данные для доступа к серверу FS01:
cmdkey /add:FS01 /user:kbuldogov /pass:Passw0rdd1
Если нужно сохранить доменную учетную запись:
cmdkey /add:fs01.winitpro.local /user:[email protected] /pass:Passw0rdd1
Сохранить учетные данные для доступа к RDP/RDS серверу:
cmdkey /generic:termsrv/MSKRDS1 /user:kbuldogov /pass:Passw0rdd1
Вывести список сохраненных учетных данных:
cmdkey /list
Вывести список хранимых учетных данных для указанного компьютера:
cmdkey /list:fs01.winitpro.local
Удалить ранее сохраненные учетные данные:
cmdkey /delete:FS01
Удалить из Credential Manager все сохраненные пароли для RDP доступа:
For /F "tokens=1,2 delims= " %G in ('cmdkey /list ^| findstr "target=TERMSRV"') do cmdkey /delete %H
Полностью очистить пароли в Credential Manager:
for /F "tokens=1,2 delims= " %G in ('cmdkey /list ^| findstr Target') do cmdkey /delete %H
Также для управления сохраненными учетными данными можно использовать утилиту vaultcmd.Вывести список сохраненных учетных данных типа Windows Credentials:
vaultcmd /listcreds:"Windows Credentials"
Все сохраненные пароли хранятся в защищенном хранилище Windows Vault. Путь к хранилищу можно получить с помощью команды:
vaultcmd /list
По умолчанию это
%userprofile%\AppData\Local\Microsoft\Vault
. Ключ шифрования хранится в файле Policy.vpol. Клю шифровани используется для рашировки паролей в файлах .vcrd.
Для работы Credential Manager должна быть запущена служба VaultSvc:
Get-Service VaultSvc
Если служба отключена, при попытке получить доступ к Credential Manager появится ошибка:
Credential Manager Error The Credential Manager Service is not running. You can start the service manually using the Services snap-in or restart your computer to start the service. Error code: 0x800706B5 Error Message: The interface is unknown.
Если вы хотите заблокировать пользователям возможность сохранения сетевых паролей в Credential Manager, нужно включить параметр Network access: Do not allow storage of passwords and credentials for network authentication в разделе GPO Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options.
Теперь, если пользователь попытается сохранить пароль в хранилище, появится ошибка:
Credential Manager Error Unable to save credentials. To save credentials in this vault, check your computer configuration. Error code: 0x80070520 Error Message: A specified logon session does not exist. It may already have been terminated.
Доступ к менеджеру учетных данных Windows из PowerShell
В Windows нет встроенных командлетов для обращения к хранилищу PasswordVault из PowerShell. Но вы можете использовать модуль CredentialManager из галереи PowerShell.
Установите модуль:
Install-Module CredentialManager
В модуле всего 4 командлета:
- Get-StoredCredential – получить учетные данные из хранилища Windows Vault;
- Get-StrongPassword – сгенерировать случайный пароль;
- New-StoredCredential – добавить учетные данные в хранилище;
- Remove-StoredCredential – удалить учетные данные.
Чтобы добавить новые учетные данные в хранилище CredentialManager, выполните команду:
New-StoredCredential -Target 'contoso' -Type Generic -UserName '[email protected]' -Password '123qwe' -Persist 'LocalMachine'
Проверить, есть в хранилище сохраненные данные:
Get-StoredCredential -Target contoso
С помощью командлета Get-StoredCredential вы можете вывести сохраненный пароль, хранящийся в диспетчере учетных данных в отрытом виде.
Выведите список сохраненных учетных данных:
cmdkey.exe /list
Скопируйте значение Target для объекта, пароль которого вы хотите извлечь и вставьте его в следующую команду:
$cred = Get-StoredCredential -Target LegacyGeneric:target=termsrv/MSKRD2S1 [System.Runtime.InteropServices.Marshal]::PtrToStringAuto([System.Runtime.InteropServices.Marshal]::SecureStringToBSTR($cred.Password))
Команда выведет сохраненный пароль в открытом виде.
Также для получения сохраненных паролей из credman в открытом виде можно использовать утилиты типа Mimikatz (смотри пример).
Сохраненные пароли из Credential Manager можно использовать в ваших скриптах PowerShell. Например, в следующем примере я получаю сохраненные имя и пароль в виде объекта PSCredential и подключаюсь с ними к Exchange Online из PowerShell:
$psCred = Get-StoredCredential -Target "Contoso"
Connect-MSolService -Credential $psCred
Также вы можете использовать Get-StoredCredential для безопасного получения сохранённых учетных данных в заданиях планировщика.
Также обратите внимание на модуль PowerShell Secret Management, который можно использовать для безопасного хранения паролей в Windows (поддерживает различные хранилища паролей: KeePass, LastPass, HashiCorp Vault, Azure Key Vault, Bitwarden.
Чтобы удалить сохраненные учетные данные из Windows Vault, выполните:
Remove-StoredCredential -Target Contoso
On Windows 11 or 10, the Credential Manager feature is designed to store sign-in information (username and passwords) for websites you browse in Microsoft Edge, apps, and networks (for instance, shared folders or mapped drives) if you choose the save credentials options. You can view, delete, backup, and restore your saved credentials of websites, connected applications, shared folders, and networks whenever required.
In this gearupwindows article, we will guide you on opening and using Credential Manager on Windows 11 and 10.
How to Open Credential Manager on Windows 11/10 using Run or Command Prompt?
If you prefer to open Credential Manager on Windows 11/10 using Run (Windows + R) or Command Prompt, use any of these commands:-
- control.exe keymgr.dll
- control.exe /name Microsoft.CredentialManager
- rundll32.exe keymgr.dll, KRShowKeyMgr
How to Launch Credential Manager from Control Panel?
To access Credential Manager from Control Panel, use these steps:-
Step 1. Open Control Panel.
Step 2. In the Control Panel window, set the “View by” option to Large icons or Small icons to see all available Control Panel items.
Step 3. Then, click on the Credential Manager option to launch it.
How to Open Credential Manager through Windows Search?
To open Credential Manager through the Windows Search menu, use these steps:-
Step 1. Click on the Start/Search button on the taskbar.
Step 2. Type Credential Manager.
Step 3. In the search results, click the Credential Manager to open the same.
How to Edit Sign-in Info in Credential Manager?
To change a username or password that is already stored on your Windows 11 or 10 machines, use these steps:-
Step 1. Open Credential Manager.
To do that, press the Windows + R keys on the keyboard to open the Run dialog box. In the Run box, type the following and hit the Enter key on the keyboard or click the OK button:-
control.exe keymgr.dll
Step 2. Then, click the Web Credentials or Windows Credentials to change or modify the details (username or password).
Step 3. Expand an entry by clicking on it.
Step 4. Click the Edit link.
Step 5. Edit the username or password or both as per requirements.
Step 6. Click the Save button.
Once you complete the above steps, Windows will automatically use the new credential to sign in to that network or website.
How to Erase or Delete Sign-in Information from Credential Manager?
To delete or remove sign-in info from Credential Manager, use the following steps:-
Step 1. Open Credential Manager.
To do that, press the Windows + R keys on the keyboard to open the Run dialog box. In the Run box, type the following and hit the Enter key on the keyboard or click the OK button:-
control.exe keymgr.dll
Step 2. Then, click the Web Credentials or Windows Credentials to change or modify the details (username or password).
Step 3. Expand an entry by clicking on it.
Step 4. Click the Remove link.
Step 5. Confirm by clicking the Yes button when prompted.
After completing the above steps, the select account credentials will be removed from your computer, and you will need to enter the username and password when you want to log in again.
How to Add New Sign-in Info in Credential Manager?
To add an app or network sign-in information in Credential Manager, use these steps:-
Step 1. Open Credential Manager.
To do that, press the Windows + R keys on the keyboard to open the Run dialog box. In the Run box, type the following and hit the Enter key on the keyboard or click the OK button:-
control.exe keymgr.dll
Step 2. Then, click the Windows Credentials to add the details (username or password).
Step 3. Next, click the Add a Windows credential link beside the “Windows Credentials” option.
Step 4. In the following screen, enter the required details and click the OK button.
Once you complete the above steps, Windows 11/10 will automatically use the sign-in details when you access that application or shared folder.
How to Export Sign-in Info from Credential Manager?
To export or sign-in information from Credential Manager, use these steps:-
Step 1. Open Credential Manager.
To do that, press the Windows + R keys on the keyboard to open the Run dialog box. In the Run box, type the following and hit the Enter key on the keyboard or click the OK button:-
control.exe keymgr.dll
Step 2. Then, click the Windows Credentials.
Step 3. Next, select the Back up Credentials link.
Step 4. In the pop-up window, click the Browse button and select a location on your computer where you want to keep the backup. Click the Save button.
Step 6. Hit the Next button.
Step 7. Press the Ctrl + Alt + Delete to continue the backup when Windows prompts.
Step 8. Set a password to protect the Credential Manager file.
Step 9. Click the Next button.
Step 10. Click the Finish button.
After completing the above steps, you will find a “.crd” file containing all your credentials saved on Windows 11/10 machine. This file you can use to import to another computer or the same device after a clean installation.
How to Import Sign-in Info in Credential Manager?
To restore or import your sign-in information from the backup on Windows 11 or 10, use these steps:-
Step 1. Open Credential Manager.
To do that, press the Windows + R keys on the keyboard to open the Run dialog box. In the Run box, type the following and hit the Enter key on the keyboard or click the OK button:-
control.exe keymgr.dll
Step 2. Then, click the Windows Credentials.
Step 3. Next, select the Restore Credentials link.
Step 4. Click the Browse button and select the “.crd” file backup.
Step 5. Click the Open button.
Step 6. Click the Next button.
Step 7. Press the Ctrl + Alt + Delete on the keyboard to continue.
Step 8. Type the password to unlock the Credential Manager backup.
Step 9. Click the Next button.
Step 10. Click the Finish button.
Once you complete the above step, the file will be imported by Windows 11/10, and all the credentials will be restored, including your web, app, and network credentials.
Conclusion
To conclude, Credential Manager is a convenient tool built into Windows 10 and 11 that allows users to store, manage and retrieve their login credentials for websites, apps, and networks. With this guide, we have provided various ways to access and use the Credential Manager on your Windows 10 and 11 devices. These include launching Credential Manager through Run, Command Prompt, Control Panel, or Windows Search, editing, deleting, and adding login details and exporting and importing sign-in information from one device to another. By following these steps, users can take full advantage of the Credential Manager’s capabilities and manage their login credentials effectively.
On Windows 10, Credential Manager is the feature that stores your sign-in information for websites (using Microsoft Edge), apps, and networks (such as mapped drives or shared folders) when you check the option to save your credentials for future logins.
The Credential Manager feature isn’t new—it has been around for a long time. It allows you to securely store and manage your login credentials so you don’t have to constantly remember and re-enter your usernames and passwords. Usually, the system will automatically save your credentials when you check the option to remember your login information, but from the manager app, you can always view, delete, add, backup, and restore credentials.
When you visit a website or app for which you’ve saved credentials, Credential Manager automatically fills in your login information, saving you time and effort. Also, the feature encrypts your information using strong encryption algorithms, making it difficult to access it unauthorizedly.
In this guide, I will teach you how to use the Credential Manager on Windows 10 to control all your login information.
- View sign-in passwords on Credential Manager
- Edit sign-in information on Credential Manager
- Delete sign-in information on Credential Manager
- Add new sign-in information on Credential Manager
- Backup sign-in information on Credential Manager
- Restore sign-in information on Credential Manager
View sign-in passwords on Credential Manager
To view passwords through the Credential Manager, use these steps:
-
Open Control Panel on Windows 10.
-
Click on User Accounts.
-
Click on Credential Manager.
-
Click the Web Credentials tab.
-
Click on the login information.
-
Click the Show option.
-
Confirm your authentication.
-
Confirm the password for the credential.
After you complete the steps, the Credential Manager will reveal the password for the web login.
It’s important to note that you can only view passwords for web credentials. The manager doesn’t provide an option to view Windows passwords.
Edit sign-in information on Credential Manager
To update a password or username already stored on Windows 10, use these steps:
-
Open Control Panel.
-
Click on User Accounts.
-
Click on Credential Manager.
-
Click the Windows Credentials tab (or Web Credentials).
-
Select the account.
-
Click the Edit button.
-
Update the username and password as necessary.
-
Click the Save button.
Once you complete the steps, the information will update with the new credentials, which means no more login prompts if you initially saved the wrong credentials or changed the sign-in information.
Delete sign-in information on Credential Manager
To delete an account credentials already stored on Windows 10, use these steps:
-
Open Control Panel.
-
Click on User Accounts.
-
Click on Credential Manager.
-
Click the Windows Credentials tab (or Web Credentials).
-
Select the account.
-
Click the Remove button.
-
Click the Yes button.
After you complete the steps, the account credentials will no longer be available on the computer, meaning that future logins will require you to enter a username and password manually.
Add new sign-in information on Credential Manager
To add an app or network credential on Windows 10, use these steps:
-
Open Control Panel.
-
Click on User Accounts.
-
Click on Credential Manager.
-
Click the Windows Credentials tab.
-
Click the “Add a Windows credential” (or “Add a certificate-based credential”) option.
-
Specify the internet or network address corresponding to the app or network resource.
-
Specify the username and password to authenticate.
-
Click the OK button.
Once you complete the steps, the new account information will be added to the computer to sign in automatically the next time you access the apps or network shared.
If the website or network location requires a certificate for authentication, you can choose the “Add a Certificate-Based Credential” option. On this page, you will be able to specify the address and load the required certificate.
In addition, Credential Manager also includes the option to save generic credentials through the “Windows Credentials” page. This a convenient way to store login information for various types of accounts and services that don’t fit into the standard “Web Credentials” or “Windows Credentials” categories.
Backup sign-in information on Credential Manager
To export and backup all your credentials for apps and networks, use these steps:
-
Open Control Panel.
-
Click on User Accounts.
-
Click on Credential Manager.
-
Click the Windows Credentials tab.
-
Click the Back up Credentials option.
-
Click the Browse button to specify a destination for the backup.
-
Specify a name for the .crd backup file.
-
Click the Save button.
-
Click the Next button.
-
Use the “Ctrl + Alt + Delete” keyboard shortcut to continue.
-
Specify a password to protect the Credential Manager file on Windows 10.
-
Click the Next button.
-
Click the Finish button.
After you complete the steps, you’ll end up with a “.crd” file containing all your Windows 10 and web credentials you can import to another computer or the same device after a clean installation.
The Credential Manager features only allow backing up the “Windows Credentials.” You cannot export the web credentials through this process. However, you can always use the password manager built into Microsoft Edge.
Restore sign-in information on Credential Manager
To restore your sign-in information from backup on Windows 10, use these steps:
-
Open Control Panel.
-
Click on User Accounts.
-
Click on Credential Manager.
-
Click the Windows Credentials tab.
-
Click the Restore Credentials option.
-
Click the Browse button.
-
Select the “.crd” files with the backup information.
-
Click the Open button.
-
Click the Next button.
-
Use the “Ctrl + Alt + Delete” keyboard shortcut to continue.
-
Confirm the password to unlock the Credential Manager backup.
-
Click the Next button.
-
Click the Finish button.
Once you complete the step, your device’s credentials for sites, apps, and networks will be restored.
While this guide focuses on Windows 10, Credential Manager has been available for a long time, which means the steps will also work on Windows 8.1 and Windows 7.
Update September 18, 2024: This guide has been updated to ensure accuracy and reflect changes to the process.
Download Windows Speedup Tool to fix errors and make PC run faster
Windows has a feature called Credential Manager. This is not exactly a new feature and is similar to technology in past versions of Windows like Vista or XP, in the sense that it stores your passwords, which you can access & manage easily. However, in Windows 7 Microsoft added the ability to back up & restore your passwords, and give it a nice user interface. This has been improved upon in Windows 11 and Windows 10 as well.
These Credentials are saved in special folders on your computer called vaults. The default storage vault for the credential manager information is referred to as the Windows Vault.
You can use the Windows Credential Manager, a part of Authentication Services, to save credentials like user names & passwords so that you can easily log onto websites or secure computers. You can access the Credential Manager through the Control Panel.
To access Credential Manager, type ‘credential manager‘ in start search and hit Enter.
From the Windows Credential Manager, you can :
- Add, edit or remove a Windows credential
- Add a generic credential
- Add a certificate-based credential
- Backup the Windows Vault
- Restore the Windows Vault
All are self-explanatory and easy to operate.
Click here to learn how to Add, Backup, Restore User Credentials using Windows Vault.
Web Credentials Manager in Windows 11/10
In Windows 11/10, you will also see one more type of credential called Web Credentials, which helps the Edge browser store your web passwords.
Web Credentials help the browser to store your web passwords securely. The Credential Manager manages your credentials using the Credential Locker service, which creates and maintains a secure storage area on the local computer that stores user names and passwords the user saved from websites and Windows apps.
In the Credential Manager, under Web Credentials, you can see all your stored web passwords.
To see the passwords behind the asterisk mark, you can click on Show. Windows will ask you for your login password to verify your identity.
Once done, the password will be exposed. If you want, you can also remove the stored password/s by clicking on Remove.
Related:
- Enable and Manage Passwords & Form-fill in Edge browser
- How to manage or delete Credentials from Credential Manager using Command Prompt
How to open Credential Manager using CMD?
Type cmd and press Ctrl + Shift + Enter to open an elevated Command Prompt. Type the following and hit Enter:
control.exe keymgr.dll
This will open the Credentials Manager.
Credential Manager not working
If your Credential Manager is not working, type services.msc in start search and hit Enter to open Services Manager. Here, ensure that the Credential Manager service and its Dependencies are started and working properly.
Read: How to clear all Credentials from Credential Manager.
TIP: VaultPasswordView lets you decrypt passwords stored in Windows Vault.
Anand Khanse is the Admin of TheWindowsClub.com, a 10-year Microsoft MVP (2006-16) & a Windows Insider MVP (2016-2022). Please read the entire post & the comments first, create a System Restore Point before making any changes to your system & be careful about any 3rd-party offers while installing freeware.