Active@ Password Changer is a Windows password recovery utility from LSoft Technologies. It resets forgotten passwords on local Windows accounts, including the built-in Administrator, and repairs account settings that keep a user from signing in. It runs as a Windows application and from its own bootable recovery media. It works on Windows client and server installations up to Windows 11. A free demo shows accounts and their settings; the paid editions make the changes.
Working on the SAM database
Windows keeps local account data and flags in the Security Accounts Manager (SAM) registry hive. Active@ Password Changer does not reveal the old password. It edits the SAM directly and clears the password, so the account signs in with an empty one. The program covers only local accounts; it does not recover Microsoft online account passwords.
Finding the right Windows installation
The program follows a wizard. Its first step offers three ways to locate a SAM database:
- search every hard disk and logical drive;
- search one chosen drive;
- open a SAM file that was copied to a flash drive or other external disk, for cases where the system drive cannot be reached directly.
For example, several SAM databases may turn up on a computer with more than one Windows installation. Active@ Password Changer lists them and the user picks the right one. It reads NTFS, FAT and exFAT volumes on GPT and RAID disks.
Exclusive drive access and read-only mode
Before writing, Active@ Password Changer must lock the drive holding the SAM exclusively. It cannot do this on the drive Windows is running from. There, account parameters open read-only. To make changes, boot from the program’s recovery media or attach the disk to another Windows computer.
Choosing and editing an account
The account list shows every local user. The primary Administrator appears first, even if renamed. Administrators, standard users and guests have separate icons. A cross marks disabled or locked accounts.
The editing screen shows current attributes beside the values the program will write. The available changes are:
- clear the user’s password;
- clear the “Account is disabled” and “Account is locked out” flags;
- clear “User must change password at next logon”;
- set “Password never expires”, so the account is not blocked again right after the reset;
- turn off “Force smart card login”;
- edit the days and hours when the account is allowed to sign in, if the account has logon-hour limits.
The program can also reset Windows Hello sign-in data (PIN, fingerprints and face recognition). It writes nothing until the user applies and confirms the change.
SAM backup before changes
Before editing, the wizard can save a backup of the SAM file to a chosen folder, such as one on an external hard disk or flash drive. Restoring that backup returns the account settings to their original state.
Recovery boot media
The included disk creator writes a Windows PE-based Boot Disk or a Linux-based LiveCD to CD, DVD, Blu-ray or USB flash drive. It can also save an ISO image. The LiveCD boots on UEFI Secure Boot and legacy BIOS computers. The Windows PE disk adds repair tools such as a command prompt, file manager, registry search, disk editor and partition manager.
Demo, Professional and Ultimate
The free demo of Active@ Password Changer detects SAM databases and lists local users and their attributes, but cannot reset passwords or change attributes. Professional makes those changes in the Windows application. Ultimate includes everything in Professional plus the Linux LiveCD recovery environment.
