Getting Started

Security experts from industry, government, and academia agree that weak passwords represent one of the ten most critical internet security threats, and are receiving more attention as a source of vulnerability, both on client desktop computers and in networks. L0phtCrack 6 identifies and assesses password vulnerability over local machines and networks in a streamlined application, with built-in reports and remediation tools.

L0phtCrack 6 uses a variety of sources and methods to retrieve passwords from the operating system. Feedback about the strength of passwords is based upon the types of audit required to recover the password, and the length of time required for the audit. L0phtCrack 6 is a state of the art tool for password auditing and recovery that serves to guide organizational policies and procedures.

System administrators audit passwords to determine the strength of the passwords used on client machines and network access. Weak passwords, such as a password using all lower case letters, represent vulnerability points for any organization. Administrators use corporate password policies and filtered password generators to improve the quality of passwords used in their organizations. But without testing the passwords against a real world password auditor, the administrator risks the chance passwords can be uncovered by an external attacker or malicious insider.

In other cases, L0phtCrack 6 can be used to streamline the migration or upgrading of users from one authentication system to another. Administrators can also use L0phtCrack 6 to recover lost or forgotten passwords, and permit re-entry to a locked out system.

L0phtCrack 6 is available in the following versions:

Installing L0phtCrack 6

To install L0phtCrack 6:

1.      L0phtCrack 6 is distributed in a self-installing executable distribution file that can be downloaded for free at http://www.l0phtcrack.com/download.html.

2.      Save the .exe file to your desktop or temp directory.

3.      On the desktop or temp directory, click the lc6setup.exe file. The installer starts a standard installation process. At the Welcome screen, click Next.

4.      Read the License Agreement screen, then click Yes to agree.

5.      The installer installs L0phtCrack 6 in a default installation location:

\Program Files\L0phtCrack\L0phtCrack 6

or you may Browse to choose a different location. Click Next when ready.

6.      A shortcut to the L0phtCrack 6 executable is installed in the Programs folder under the Start menu. The default folder name is L0phtCrack 6. You may choose a different name. Click Install when ready.

7.  The installer now installs components on to your system.

8.  Now, the WinPcap network sniffing driver installs.

9.  Click Finish when the WinPcap installer completes the installation.

10.  Click Finish when the L0phtCrack installer completes the installation.

11.  L0phtCrack 6 is now installed on your system. Click the Start button, and go to the Programs folder to run L0phtCrack 6.

Uninstalling L0phtCrack 6

To uninstall L0phtCrack 6:

1.      In the Windows Control Panel, open Add/Remove Programs.

2.      Select L0phtCrack 6 from the list of programs installed on your system.

3.      An installer window informs you of your choice to uninstall L0phtCrack 6.

4.      Confirm that you want to delete the files by clicking Uninstall.

5.      When the installer has completed the removal, click Close.

6.      L0phtCrack 6 is now removed from your system.

Remote Manual Installation of LC Agent

To manually install the LC Agent on a remote machine, use a Command screen, and follow the instructions below:

1. Select Create Remote Agent in the File menu.
2. A Warning dialog informs you that this regenerates a public key and embeds it in the lcagent.exe file. It also breaks communication between other remote machines. Click Yes to create the remote agent.
3. Copy lcagent.exe (or lcagent64.exe for a 64 bit target OS) from your LC6 directory to the target machine.
4. From a command prompt, locate the directory you copied lcagent.exe (or lcagent64.exe) on the remote machine, then run the install as follows:
   
   
   lcagent.exe /install
   
   
5. To remove the LC Agent, use the command prompt with the following command:
   
   
   lcagent.exe /remove
   
   
6. Delete the .exe file.

Registering L0phtCrack 6

L0phtCrack offers a 15 day free trial period for L0phtCrack 6, providing access to the basic auditing features for 10 user accounts. The following are unavailable in the trial version:

• Brute force crack
• Pre-computed crack
• Audit scheduling

Registered versions of L0phtCrack 6 provide an Unlock Code allowing continued use of the product, as well as features available only in the L0phtCrack 6 Administrator version.

L0phtCrack offers registration online, by telephone, fax, and online. Click here for phone and fax numbers, and the online registration form.

L0phtCrack 6 is licensed on a per machine basis, and each machine generates its own unique L0phtCrack 6 Hardware Fingerprint. When registering, provide your name, address, credit card information, email address, and the L0phtCrack 6 Hardware Fingerprint.

Note: The Hardware Fingerprint is obtained from your installation. You must download and install L0phtCrack 6 to before you can register it.

To obtain the L0phtCrack 6 Hardware Fingerprint, launch L0phtCrack 6, and click Enter Key from the registration reminder screen. The Registration dialog box provides you a Hardware Fingerprint. When you register, you receive a unique Unlock Code for your installation. Enter this code in the L0phtCrack 6 Registration dialog to unlock the product.

Reinstalling L0phtCrack 6

To reinstall L0phtCrack 6 on new machine or operating system, you will need to obtain a new Unlock Code. Install L0phtCrack 6 on the new system, then copy the installation's Hardware Fingerprint, from the About dialog in the Help menu or from the Splash screen that appears when L0phtCrack 6 is launched. Click here or go to http://www.l0phtcrack.com/reinstall.html and obtain an Unlock Code for your new installation.

Note: Unlock Codes are unique to each individual system, and one code does not work for other systems.