What Is Windows Credential Manager and How To Use It?

The Windows Credential Manager was first introduced in Windows 7 and has since been included in all Windows operating systems. This is a feature that stores sign-in information for websites where you save your credentials for using Microsoft Edge, your applications, and any usernames and passwords used to access resources on your network, such as shared folders, mapped network drives, Remote Desktop devices, etc.

This post discusses everything there is to know about this feature, which includes the following topics:

Credential Manager is a time-saving feature in Windows, but simultaneously can be a pain in the neck when it does not function as it is supposed to.

One of the prominent issues with the Credential Manager is when some sign-in information is changed, but it still uses the old data registered, resulting in a failed sign-in attempt. In that case, you can either edit the stored credentials, remove them, or disable Credential Manager entirely.

Continue reading to learn more about this feature in Windows and how to use it.

What is Credential Manager?

As we already mentioned, Credential Manager stores your email addresses, usernames, and passwords used to sign in to websites and other network resources and provides auto-filling support to save time.

The credentials stored are divided into 2 categories:

Web Credentials: These credentials are used to log into websites through the Edge browser.

Windows Credentials: These credentials are used by Windows applications, such as Skype, Microsoft Teams, OneDrive, etc., and other network-based resources to sign in. It also contains certificate-based credentials often used by organizations with complex network security.

When you select the “Remember me” or “Save password” option while putting in your credentials, the Credential Manager saves that information locally to use it the next time you are trying to sign into the same device/website.

How to Access Windows Credential Manager

You can open the Credential Manager on Windows 10 and 11 in multiple ways. Choose your preferred method from below:

From the Control Panel

Navigate to the following to reach Windows Credential Manager:

Control Panel >> User Accounts >> Credential Manager
control panel
Open Credential Manager from the Control Panel

Using Windows Search

You can also search for “Credential Manager” from Windows Search to open it directly.

search 1
Open Credential Manager through search

From Command Line

To open the Credential Manager through the Run dialog box or through the Command Prompt, run the following cmdlet:

rundll32.exe keymgr.dll, KRShowKeyMgr

This will not open the Credential Manager in the Control Panel window, but rather a small window will open, such as the one below. You can perform the same functions here as through the Control Panel.

small window
Credential Manager through command line

Now that you know how to access the Credential Manager, let us show you how to use it.

How to Add New Credentials to Credential Manager

When connecting to a new device on the network or accessing a new website using Microsoft Edge, you can simply save the password there to add it to the Credential Manager. Alternatively, you can also add new sign-in information directly to your Credential Manager:

Note: You can only add Windows Credentials manually to the Credential Manager.

  1. Open Credential Manager by navigating to the following:
    Control Panel >> User Accounts >> Credential Manager
  2. Switch to the Windows Credentials tab and then click Add a Windows credential.
    add 2
  3. In the next window, enter the source to connect to, the username and its password to authenticate, then click Ok.
    add ok 1

The sign-in information will now be saved and will automatically be suggested when you try and connect to the source.

How to Remove Credentials from Credential Manager

To remove or delete your credentials from Credential Manager, follow these steps:

  1. Open Credential Manager by navigating to the following:
    Control Panel >> User Accounts >> Credential Manager
  2. Here, look for the sign-in information you want to remove, then click on the arrow-head in front of it to expand it.
    arrow
  3. Now click Remove.
    remove 2
  4. On the confirmation dialog box, click Yes.
    confirm 2

The Credential Manager will now no longer save your credentials.

How to Edit Username/Password in Credential Manager

You can change the username and password to your existing credentials in the Credential Manager. However, you cannot change the source. To change the source, you need to remove this entry and then create a new one from the methods given above.

To make changes to your existing credentials in the Credential Manager, follow these steps:

  1. Open Credential Manager by navigating to the following:
    Control Panel >> User Accounts >> Credential Manager
  2. Here, look for the sign-in information you want to remove, then click on the arrow-head in front of it to expand it.
    arrow
  3. Now click Edit.
    edit
  4. Here, make the necessary changes and click Save.
    save

How to Backup Username/Password from Credential Manager

You can also backup your saved credentials in the Credential Manager. This can be very helpful in case you are performing a clean Windows installation, resetting the computer, or getting rid of it.

This backup can then be restored on another Windows computer using the method discussed below.

Perform the following steps to backup all your credentials:

  1. Open Credential Manager by navigating to the following:
    Control Panel >> User Accounts >> Credential Manager
  2. Switch to the Windows Credentials tab and then click Back up Credentials.
    backup
  3. From the Backup wizard, click Browse.
    browse
  4. Now enter a name for the backup file and click Save.
    save 1
  5. Back on the wizard, click Next.
    next 5
  6. You will now be asked to press the CTRIL + ALT + Delete keys simultaneously to proceed with the backup. Press the keys.
    press keys
  7. Enter a password and confirm it to protect the backup file, then click Next.
    next 2 1
  8. Click Finish.
    finish 1

The backup file will now be generated with a “.CRD” file extension. You can now use this file to import the credentials into the Credential Manager on another computer, or on the same computer, after a Windows reinstallation/resetting.

How to Import Credentials into Credential Manager

Follow the steps below to use the .CRD file to import the credentials into the Credential Manager:

  1. Open Credential Manager by navigating to the following:
    Control Panel >> User Accounts >> Credential Manager
  2. Switch to the Windows Credentials tab and then click Restore Credentials.
    restore
  3. In the restoration wizard, click Browse and select the .CRD file which was generated while creating a backup. Then click Next.
    browse next
  4. Now, press the CTRL + ALT + Delete keys simultaneously.
    keyss
  5. Provide the password that was used to secure the file while creating the backup, and click Next.
    password next 1
  6. You will now be confirmed that the credentials have been backed up successfully. Click Finish.
    finish 2

The credentials will now be imported/restored to your computer.

We have discussed all the different things you can manage in the Credential Manager up until now. If you are not fond of using it, or think your passwords can be compromised by the Credential Manager, you can disable this feature entirely. However, you will then need to manually enter your credentials for all resources every time

How to Disable Windows Credential Manager

From Services

Perform the following steps to disable Credential Manager using Windows Services:

  1. Open the Services Console by typing in services.msc in the Run dialog box.
    services
  2. Right-click on the Credential Manager service and then click Properties from the context menu.
    properties 3
  3. From the Properties window, select “Startup type” Disabled, then click the Stop button. Now click Apply and Ok.
    apply ok 3

Credential Manager is now disabled. When you try to access it, you will see the following error message:

error 1
Unable to run Credential Manager

If you want to rerun the feature in the future, return to the Properties window of Credential Manager service, set “Startup type” to Automatic, and then start the service.

From Group Policy

You can also disable the Credential Manager from Group Policy. However, this method does not completely disable the Credential Manager, only the credentials used for network devices are removed and disabled.

Here is how to do it:

Note: The following method uses the Local Security Policy Editor, which is not available in Windows Home editions. Learn how to install and enable the Local Security Policy Editor in Windows Home.

  1. Open the Local Security Policy Editor by typing in secpol.msc in the Run dialog box.
    secpol
  2. Now navigate to the following from the left pane:
    Security Settings >> Local Policies >> Security Options
  3. Double-click the policy “Network access: Do not allow storage of passwords and credentials for network authentication” from the right pane.
    policy
  4. From the pop-up window, select the Enabled radio button, then click Apply and Ok.
    enabled 3

As you may notice, the Windows Credentials in the Credential Manager for network devices will disappear, but they will still be saved on your computer.

To bring them back and to allow them to be saved again, simply return to the policy and select the Disabled radio button.

From Command Prompt

To disable the Credential Manager from the Command Prompt, perform these steps:

  1. Open Command Prompt with administrative rights.
  2. Now paste the following command to set the Credential Manager service to “disabled.”
    REG add "HKLM\SYSTEM\CurrentControlSet\services\VaultSvc" /v Start /t REG_DWORD /d 4 /f
    disabled cmd
  3. Now use the following cmdlet to stop the service.
    sc stop VaultSvc
    cmd stop
  4. Now restart your computer for the changes to take effect.

Once the computer reboots, you will see that the Control Panel is no longer accessible.

If you wish to re-enable it, simply run the following cmdlet in elevated Command Prompt and restart your PC.

REG add "HKLM\SYSTEM\CurrentControlSet\services\VaultSvc" /v Start /t REG_DWORD /d 2 /f

Once it reboots, the service will run automatically, and the Credential Manager will begin working again.

Final Thoughts

Credential Manager is a useful feature to have, especially if you access a lot of network resources on a daily basis. However, it is not as secure as you would want it to be.

If programmed correctly, an elevated process can easily obtain your credentials from the Credential Manager, since they are in plain text. This is usually the reason people prefer to disable it.

If you think we left out a feature for the Credential Manager, let us know in the comments section below, so we can add it for others to benefit from.

Also see:

Leave a Reply

You have to agree to the comment policy.