Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am trying to recover the password for one of the logins on a SQL 2005 (SP3) database. There seem to be a large number of tools out there to do this.

I'm a little nervous of running a tool against a live database server that I don't know much about.

What tools would you recommend?

share|improve this question
up vote 2 down vote accepted

NGS Squirrel.

This load the passwords hashes out of sysxlogins (or whatever the new view is :-) and cracks them: it does not load the live server

(not to be confused with SQuireL, the client tools)

share|improve this answer
I have used this and it works great. – Steve Jones Jun 4 '09 at 15:22

Damn, beaten to it, I was about to suggest NGS :-)

This URL,, describes how their cracker works. They even helpfully supply C++ source that you can compile yourself. I've used the NGS software and it works provided the password isn't too hard.

The NGS software just takes the password hash from the row in syslogins, so it doesn't tinker with master.mdf. Like you, I'd be pretty nervous about anything that hacked the master database, and I'd use it only as a last resort.


share|improve this answer

Are you recovering because someone lost a password or because you need to recreate this on a new server? If it's the former, use the NGS tool above. If it's the latter, you can script the login with a hashed password, and run the script on the new server, securely moving the password without needing to know it.

Search sp_help_revlogin for a script.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.