Cisco Type 7 Password Decryption

Service password encryption is just a false sense of security.

Crack Cisco type 7 passwords:

  • enable passwords:
  • username passwords:

Service password encryption is just a false sense of security.


Note: Enter the encrypted password without the 7 in front and without any spaces

For example:

username test password 7 0822455D0A16

should be entered as 0822455D0A16

Only use this tool for legitimate training purposes.

Cisco Type 7 Password Decryption

One fundamental difference between the enable password and the enable secret password is the encryption used.

The enable password is stored by default as clear text in the router or switch’s running configuration. That means that anyone standing behind you when you type the commands “show running-config” or “show startup-config” will be able to see your passwords. People will also be able to see your passwords if they are saved on a TFTP server or disk as they are all in clear text.

Service password encryption will encrypt passwords. It will encrypt the enable password as well as encrypting all other clear text passwords on your router including the VTY, AUX, console and user passwords.

WARNING: Service password encryption uses weak encryption and can easily be cracked. Cisco says that this encryption should be used for a situation where someone is looking over your shoulder and you type “show run” or another command that displays passwords. Service password encryption would prevent that person seeing the passwords in clear text.

It is better to use secret passwords with local authentication as the secret passwords are a lot harder to crack.

To configure an enable password, do the following:

Router>

Router>enable
Router#configure terminal
Router(config)#enable password cisco

To enable password encryption, do the following:

Router>

Router>enable
Router#configure terminal
Router(config)#service password-encryption

Displaying the running config will show the following:

Router(config)#do sh run | i enable
enable password 7 060506324F41

The number '7' indicates that the password has been encrypted. The number that follows (060506324F41) is the encrypted version of the password.

Use this tool to decrypt type 7 encrypted passwords – it’s really easy to crack these passwords:

NOTE: Please only use the below form for password recovery, training and demonstration purposes!