Windows 10 Passwords Blank in Ophcrack/ONTP&RE – Fix

TL;DR

Ophcrack and ONTP&RE often show blank passwords for Windows 10 due to changes in how Windows stores password hashes. This guide explains how to fix this by using a current hashpack, ensuring you’re running the tools with administrator privileges, and verifying your VM settings if applicable.

Fixing Blank Passwords in Ophcrack/ONTP&RE

1. Update Your Hashpack: This is the most common cause. Windows 10 uses newer password hashing algorithms than older versions of Windows. You need a hashpack that includes these hashes.
   • Ophcrack: Download the latest hashpacks from the Ophcrack website. Place them in the correct directory (usually C:Program FilesOphcrackhashdb).
   • ONTP&RE: ONTP&RE also requires updated hashpacks. Download from a reliable source and place them in the appropriate folder within your ONTP&RE installation directory. The exact location varies depending on your version, but look for a ‘hashes’ or similar folder.
2. Run as Administrator: Both Ophcrack and ONTP&RE need administrator privileges to access the SAM database correctly.
   • Right-click the application icon (Ophcrack or ONTP&RE executable).
   • Select “Run as administrator”.
3. Verify VM Settings (If Running in a Virtual Machine): If you’re running Ophcrack/ONTP&RE inside a virtual machine (VM), ensure the VM is configured to access the physical hard drive directly.
   • VirtualBox: In VirtualBox settings, go to Storage. Make sure your Windows 10 installation disk is set as “Direct Access” or similar, not just a read-only image.
   • VMware: Similar configuration in VMware’s virtual hardware settings. Ensure the VM has direct access to the physical disks containing the SAM database.
4. Check System File Integrity (Less Common): Corrupted system files can sometimes interfere with password extraction.
   1. Open Command Prompt as Administrator.
   2. Run the System File Checker:

      sfc /scannow

      This will scan and attempt to repair corrupted system files.

5. Disable BitLocker (If Enabled): If BitLocker is enabled on the Windows 10 drive, it can prevent access to the SAM database.
   • Temporarily disable BitLocker before running Ophcrack/ONTP&RE. Remember to re-enable it afterward for security reasons.
6. Consider Alternative Tools: If you continue to have issues, explore other password recovery tools like Hashcat or John the Ripper. These often offer more advanced features and support a wider range of hashing algorithms.