Retrieving password from Windows Credential Manager using CMD

Question

I am trying to add and retrieve credentials from Windows Credential Manager using a command prompt.

To add a new credential, I have the command like below and it works perfectly:

cmdkey /add:testTarget /user:testUser /pass:testPassword

However, when I try to retrieve the credentials, which I have added earlier (testTraget) using CMD, I am unable to get the password using the command below:

cmdkey /list:testTarget

The command only returns the Target(testTarget),Type(Domain Password), and the Username(testUser)

How can I retrieve the testUser password?

I know this is possible in Mac OS using Bash and keychain.

score 2 · Accepted Answer · edited Apr 14 '19 at 20:41

2

"How can I retrieve the testUser password?"

This is not possible using cmdkey.

Reference cmdkey:

Create, list or delete stored user names, passwords or credentials.

...

Once stored, passwords are not displayed.

edited Apr 14 '19 at 20:41

Peter Mortensen

30,738
21
105
131

answered Feb 12 '15 at 17:44

DavidPostill

7,734
9
41
60

4

Begs the question what are they stored for? – dprothero Jun 03 '16 at 15:59
1

now we know we can't use cmdkey to do that... something should be able to interact with the store to retrieve the password... what is it? – Laurent Picquet Apr 06 '17 at 12:11
@user1885834 _(shrug)_ I've no idea. – DavidPostill Apr 06 '17 at 12:16
3

I came here looking for the same answer. Looking for something like `security` command on macOS. – Michael Welch Aug 04 '20 at 22:52

Michael D. · Answer 2 · 2021-01-28T15:56:29.340

It's possible to work with passwords from cmdkey's credentialstore using powershell and the Credman.ps1 library.

https://gallery.technet.microsoft.com/scriptcenter/PowerShell-Credentials-d44c3cde

Add credentials as system user (after a psexec -s in administrator's powershell console). Run powershell script as system user as well (ie. in task scheduler tasks) for safe usage.

To learn more about Sysinternal's psExec and cmdkey see this answer: https://superuser.com/questions/1206443/how-to-add-cached-credentials-for-the-windows-system-acount

--

Adding a password

cmdkey /generic:Foo /user:bar /pass:banana

Retrieving plain-text password with powershell

. "Credman.ps1"

$CredKey = "Foo"

$sourceCredential = Read-Creds $CredKey
$pass = $sourceCredential.CredentialBlob.tostring()
write-host $pass

Retrieving password from Windows Credential Manager using CMD

2 Answers2