Re: FAQ: Recover Admin Password

askme · Post by **askme** » Mon Oct 31, 2005 5:43 pm

I think you have seen my post http://forum.joomla.org/index.php/topic ... l#msg97860I forget my Admin Password, How to reset/get it? I follow you instruction to set all the possible field using phpmyadmin, but still I am getting message such as you cannot log in, no administrator has been set.
Please let me know what to do? By the way do I need something to put in ACTIVATION filed of table jos_users, if so what?

THanks

kenmcd · Post by **kenmcd** » Mon Oct 31, 2005 6:41 pm

Sounds like you deleted your admin user.

See this post on how to add an admin user.
http://forum.joomla.org/index.php/topic ... l#msg74944

guilliam · Post by **guilliam** » Fri Feb 17, 2006 9:56 am

DISCUSSION THREAD from Recover Admin Password

please feel free to discuss on this thread of this FAQ.

TheSaint · Post by **TheSaint** » Wed Mar 01, 2006 12:53 pm

While in phpadmin you can also view the username and email values. You can then copy/paste these into the 'forgot password login' box on your front end. (Assuming you have this module enabled, if you don't feel like playing around with MD5's.) Great tut Ken!

verbalkent · Post by **verbalkent** » Tue Mar 07, 2006 3:56 am

does this work with 1.0.8?

theperthgirls · Post by **theperthgirls** » Fri Mar 17, 2006 6:12 am

Yes it works with 1.08 - logged in correctly now.

Surprised (and also security concerned) at how easy this was to do.

mbd · Post by **mbd** » Sat Mar 18, 2006 4:43 pm

i have MD5 hashed password but i don't know what is the password is ..

here is the MD5 password :

fe01ce2a7fbac8fafaed7c982a04e229

how i can convert it to understandable password so i can write it on password box ?

theperthgirls · Post by **theperthgirls** » Sun Mar 19, 2006 12:27 am

Why don't you try the three that were there? and then once you are in, change the password from the user manager? This is how I did it, or use the link on the help page to create a new one?

gracion · Post by **gracion** » Sun Mar 19, 2006 12:38 am

mbd wrote: i have MD5 hashed password but i don't know what is the password is ..
how i can convert it to understandable password so i can write it on password box ?

FYI, MD5 is "one-way" - you can't convert the hash back into the original password, by design. You'll have to find some other approach to your problem.

guilliam · Post by **guilliam** » Sun Mar 19, 2006 6:32 am

gracion wrote:
mbd wrote: i have MD5 hashed password but i don't know what is the password is ..
how i can convert it to understandable password so i can write it on password box ?
FYI, MD5 is "one-way" - you can't convert the hash back into the original password, by design. You'll have to find some other approach to your problem.

^^thats is absolutely NOT TRUE.
just a little note from a super newbie like me

there ARE md5 hashed to unhashed tools.
this will take a lot of cpu power to do

google around and look for "**** ***" (its right on the top of the list.

careful with privacy laws my young Jedi

make sure you wil be unhashing your own password and NOT others.

- g

SELF EDIT: edited the firt post for SECURITY reasons and "privacy laws" compliance.
if you want to have the tool i first posted,.. google around and look for it.
sorry.. dont want to take the risk in giving you leads for it

guilliam · Post by **guilliam** » Sun Mar 19, 2006 6:36 am

mbd wrote: i have MD5 hashed password but i don't know what is the password is ..

here is the MD5 password :

fe01ce2a7fbac8fafaed7c982a04e229

how i can convert it to understandable password so i can write it on password box ?

fe01ce2a7fbac8fafaed7c982a04e229 in md5 is:
demo
in unhashed. just a simple example that hashed md5 can be converted to unhashed

- g

gracion · Post by **gracion** » Sun Mar 19, 2006 7:59 am

Ah, my bad. I should have been reading slashdot (or wikipedia), not the RFC.

I get the impression that MD5 is still hard to crack if a strong password is used (long, mixed case, special characters, non-dictionary). Is that still correct?

guilliam · Post by **guilliam** » Sun Mar 19, 2006 8:08 am

gracion wrote: Ah, my bad. I should have been reading slashdot (or wikipedia), not the RFC.

I get the impression that MD5 is still hard to crack if a strong password is used (long, mixed case, special characters, non-dictionary). Is that still correct?

hard to crack, YES.
uncrackable, NO.

- g

guilliam · Post by **guilliam** » Sun Mar 19, 2006 8:14 am

on the non-dictionary, yeah thats a good element also HOWEVER, most crackers will do a BRUTE FORCE approach right from the start rather than a dictionay approach.

- g

mbd · Post by **mbd** » Sun Mar 19, 2006 7:19 pm

guilliam , thank you

why you call it crack ?

is this mean i crack my own website .. hell no .. i just want to disable the md5 or know how to unhash it as you do .. still don't know how you make it .. i wish i know .. please tell me guilliam . thank you again .

guilliam · Post by **guilliam** » Sun Mar 19, 2006 10:33 pm

crack or cracking is hard to define word nowadays since crackers are always related or have the connotation of hacking.
however based on my newbie knowledge

it is called "cracking" and tools and users who does this craft are commonly called "crackers".

how to do it,.. you can do it MANUALLY,.. the baisc CONCEPT and foundation of password cracking is simply "trial and error". so when you do this trial and error lets say you try putting in the right PW from a to z, thats already cracking. that a to z is a non complex,.. however scripts and apps are there to provide this automatically for you.
i just cant imagine 12 characters of a-z and i will do it manually. lolz.

is this mean i crack my own website .. hell no .. i just want to disable the md5 or know how to unhash it as you do ..

^^no you are not cracking your website. you are cracking the hashed MD5 of the PW to get the unhashed value.

..i just want to disable the md5 or know how to unhash it as you do ..

^^as mentioned above try googling around. sorry, i edited my post on giving everyone leads. though those apps are legal, the usage may not. so try looking around what tools can be used for that. there are actually a lot of cracking tools out there. md5, base64, access db, cisco type-7, cisco pix, RSA secureID token,.. etc.. you name it.. those tools must be just out there sitting for you to use

- g

Chucky · Post by **Chucky** » Fri Mar 24, 2006 4:12 am

I restored joomla database and now locked out of the administrator area.

It says, "Incorrect username, Password or Access Level, please try again."

I've tried adding admin user, resetting the password to known hashed password, it does not work.

What are my options here?

Thanks!

Chucky · Post by **Chucky** » Fri Mar 24, 2006 5:33 am

Chucky wrote: I restored joomla database and now locked out of the administrator area.

It says, "Incorrect username, Password or Access Level, please try again."

I've tried adding admin user, resetting the password to known hashed password, it does not work.

What are my options here?

Thanks!

Never mind. Fixed by replacing the vBridged supplied joomla files with the backups.

Note to self: Never use or download gz backup files (databases) from cpanel...never.

guilliam · Post by **guilliam** » Sun Mar 26, 2006 5:21 pm

@Chucky, guess that really sometimes happen.

- g

n25philly · Post by **n25philly** » Thu May 04, 2006 1:44 pm

My password doesn't seem to be working either. I downloaded both of the suggested programs and can't figure out how to get into the data base with either of them. It's local on my computer if that helps. Can anyone explain how to fix this in a somewhat simple manner?

n25philly · Post by **n25philly** » Thu May 04, 2006 1:52 pm

never mind, I figured it out. I have no clue how, but I did $:-\$

nugg0t · Post by **nugg0t** » Tue Jun 06, 2006 2:31 am

Hi guys.

I'm having a similair problem.
I can access my FTP, and in there I can find my login name and pw, but they wont allow me to log into Joomla!

I've read the instructions above, but my problem seems different. I can't get a hashed password to de-hash. I have the correct pw, but it wont work.
Any tips out there? I'm about to give up on this prog. It's caused me more stress and work than it would be to just use Dreamweaver

Thanks a lot to anyone who can offer advice on this. If I can get it to work I'll be so happy!

AmyStephen · Post by **AmyStephen** » Sat Jul 15, 2006 12:08 am

Thank-you

- btw - this still works for v. 1.5 !

lmwallace · Post by **lmwallace** » Tue Sep 05, 2006 7:44 pm

I'm new and need help - I just installed but the person helping me lost the admin password. I'm trying to recover it as instructed using MD5 but I don't see the options for the admin user in my setup - please go here to see my MySQL control panel. I'm lost - any help is appreciated.
http://www.stmonicahs.org/mysql.jpg

AmyStephen · Post by **AmyStephen** » Sun Sep 10, 2006 2:07 pm

LMWallace -

Sorry for the delay in a response; I have been offline for over a week. If, in the future, you do not get a response in a day, or so, and you really need to get an answer (as is the case, here), feel free to email me or swing by my website and drop a line.

It appears that somehow you have lost your admin ID. Here is a post that will help you with that problem: .

Again, sorry for the delay. Hopefully, you are well beyond this problem anyway!
Amy

Rowby · Post by **Rowby** » Tue Sep 26, 2006 3:01 pm

One thing I strongly suggest is immediately everyone create a SECOND super administrator for double protection!

Rowby
http://www.rowby.com

Tinohead · Post by **Tinohead** » Tue Oct 17, 2006 12:50 pm

tudorilisoi wrote: Hello!
I just published an online sql generator for password reset
here's the link

I'd appreciate if you put this in the official thread

Regards.

Thanks very much, that did the trick!

torkil · Post by **torkil** » Tue Oct 17, 2006 3:33 pm

If you have access to phpmyadmin for instance, all you have to do is open the jos_users table, edit the admin user, write the new password (in clear text) in the password field and select MD5 from he functions list to the left of the password field.

Press save, and you have a brand new password with an MD5 hash.

... what are your opinions on "forgot password"-functionality on the backend login? "Out of sight, out of mind"?

torkil · Post by **torkil** » Tue Oct 17, 2006 3:44 pm

and even easier:
http://www.yoursite.com/index.php?optio ... n&Itemid=1
...use the forgot password function from there

Seems to work in both 1.0 and 1.5.

viziers · Post by **viziers** » Tue Oct 31, 2006 5:48 pm

hi guys, please help.
I forgot my admin password, and tried to change the password through phpmyadmin many times.
currently, i saw on the jos_user db the password = c3284d0f94606de1fd2af172aba15bf3
went to http://pajhome.org.uk/crypt/md5/
tried to unhashed, then the result: 77e2edcc9b40441200e31dc57dbb8829
still unable to access :-(
pls help to generate the password. thanks alot

The Joomla! Forum™