CredWiz Explained: How Windows Credential Backup and Restore Works

QUICK ANSWER

CredWiz (credwiz.exe) is the built-in Windows Credential Backup and Restore Wizard. It creates a password-protected .crd backup of supported credentials associated with the current Windows user, such as certain saved network, server, Remote Desktop, and application credentials.

CredWiz is useful when migrating a user to another computer or reinstalling Windows, but it is not a complete password-backup solution. It does not reliably include browser passwords, passkeys, Windows Hello information, Wi-Fi profiles, certificates, or every entry shown under Web Credentials.

 

What Is CredWiz?

CredWiz is a graphical Windows utility for backing up and restoring credentials from the current user’s Windows credential store. Its executable is normally located at:

C:\Windows\System32\credwiz.exe

The utility is commonly displayed as Stored User Names and Passwords or the Credential Backup and Restore Wizard, depending on the Windows version and how it is opened.

Credential Manager stores sign-in information used by websites, connected applications, computers, and network resources. Microsoft separates this information into categories such as Web Credentials and Windows Credentials. support.microsoft.com

CredWiz should not be confused with:

• A password manager
• A Windows system backup
• A Microsoft account recovery tool
• Azure Key Vault
• The SQL Server CREATE CREDENTIAL feature
• A tool for displaying every saved password

How CredWiz Works

CredWiz operates within the currently signed-in user’s security context. It requests Windows to export supported stored credentials into a Credential Backup File with the .crd extension.

During backup, the wizard asks you to protect the file with a password. During restoration, that password is required before Windows can import the credentials.

The process can be summarized as follows:

1. Windows reads supported credentials belonging to the current user.
2. CredWiz packages those credentials into a .crd file.
3. The backup is protected using the password supplied in the wizard.
4. The .crd file can be stored securely or transferred to another Windows installation.
5. During restoration, Windows authenticates the user and imports supported entries into that user’s credential store.

Windows itself manages credentials through protected authentication components and credential-management processes. Applications do not normally obtain unrestricted access to every user secret. learn.microsoft.com

What CredWiz Can Back Up

CredWiz is primarily useful for supported entries under Windows Credentials, including some credentials saved for:

• Network shares
• File servers and NAS devices
• Remote computers
• Remote Desktop connections
• Windows-integrated applications
• Generic credentials created by compatible applications
• Resources identified by a server name, host name, IP address, or service target

The exact entries exported can depend on the credential type, application, Windows release, organizational policy, and how the credential was originally stored.

What CredWiz Does Not Reliably Back Up

Do not assume that CredWiz creates a backup of every password on the computer. It generally should not be relied upon to preserve:

• Passwords stored in Chrome, Firefox, Edge, or another browser
• All entries displayed under Web Credentials
• Browser passkeys
• Windows Hello PINs, fingerprints, or facial-recognition data
• Microsoft Authenticator registrations
• Wi-Fi profiles and wireless keys
• BitLocker recovery keys
• EFS encryption certificates and private keys
• Smart-card credentials
• Personal certificates
• Microsoft account passwords
• Domain account passwords
• Cached domain sign-in data
• Application databases or application-specific tokens
• Credentials belonging to other Windows users

Reports on Microsoft’s community site show that restoring a Credential Manager backup may restore Windows Credentials without restoring Web Credentials. Treat browser or website-password migration as a separate task. learn.microsoft.com

Prerequisites and Permissions

Before using CredWiz:

• Sign in to the Windows account whose credentials you want to back up.
• Confirm that you can access the saved resources before creating the backup.
• Prepare a secure destination for the .crd file.
• Choose a strong, unique backup password.
• Ensure that security software or organizational policy does not block credential export.
• Verify that the destination computer supports the relevant applications and authentication methods.

Administrator rights are not normally required to back up the current user’s supported credentials. Running CredWiz as an administrator does not grant access to another user’s credential store.

In managed environments, Group Policy, endpoint security software, credential-protection controls, or privileged-access policies may restrict backup or restoration. Contact the organization’s administrator before transferring corporate credentials to another device.

How to Review Stored Credentials Before Backing Up

Before creating a backup, review the entries associated with your account:

1. Open Start.
2. Search for Credential Manager.
3. Open the Credential Manager Control Panel.
4. Select Windows Credentials.
5. Review the listed targets and remove entries that are obsolete or no longer trusted.

Microsoft documents Credential Manager as the Windows interface for viewing and deleting saved credentials used by websites, connected applications, and networks. support.microsoft.com

IT professionals can also list supported stored credential targets from a Command Prompt:

cmdkey /list

Microsoft documents cmdkey as a command for creating, listing, and deleting stored credentials. It is not a direct replacement for CredWiz’s encrypted backup-and-restore workflow. learn.microsoft.com

How to Back Up Credentials with CredWiz

1. Press Windows key + R.

2. Enter:

   credwiz

3. Select Back up credentials.

4. Select Browse and choose a secure destination.

5. Enter a meaningful filename. Windows creates a file with a .crd extension.

6. Select Next.

7. If Windows requests the secure attention sequence, press Ctrl + Alt + Delete.

8. Enter and confirm a strong password for the backup.

9. Complete the wizard.

10. Confirm that the .crd file exists in the selected location.

Do not use your Windows sign-in password as the backup password. Store the backup password separately in an approved password manager.

Verify the Backup

A successful wizard message confirms that Windows created the file, but the strongest practical verification is a controlled restore test using a non-production user profile or test computer.

At minimum:

• Confirm that the file is not empty.
• Record the creation date and originating user.
• Confirm that the password can be retrieved from your approved password manager.
• Keep the original credentials until the migration has been tested.
• Verify important services after restoration rather than assuming every entry was exported.

The .crd file is not intended to be opened as a document. It should be restored through CredWiz rather than renamed, edited, or decoded.

How to Restore a CredWiz Backup

Only restore credential backups that you created or received through an authorized organizational process.

1. Copy the .crd file to a secure local location on the destination computer.

2. Sign in as the Windows user who should receive the credentials.

3. Press Windows key + R.

4. Enter:

   credwiz

5. Select Restore credentials.

6. Browse to the .crd file.

7. Select Next.

8. If prompted, press Ctrl + Alt + Delete.

9. Enter the password assigned when the backup was created.

10. Finish the wizard.

11. Open Credential Manager and review the restored entries.

12. Test access to each important network resource or application.

Restoration does not guarantee that every connection will work immediately. A server name may have changed, a password may have expired, an account may be disabled, or the destination computer may require additional certificates, multifactor authentication, application registration, or domain access.

What to Expect After Restoration

Successfully imported credentials should appear under the appropriate Credential Manager category and may be used automatically when the matching resource requests authentication.

You may still be asked to sign in when:

• The stored password has changed.
• The credential target does not match the new server name.
• The account requires multifactor authentication.
• The application uses modern token-based authentication.
• The credential has expired or been revoked.
• The destination computer is outside the required domain or network.
• An application maintains its own credential store.
• Organizational policy prohibits reusable saved credentials.

Test access instead of interpreting a visible Credential Manager entry as proof that authentication will succeed.

Benefits of CredWiz

Built Into Windows

CredWiz is included with supported Windows installations and does not require an unverified credential-export program.

Useful During Computer Migration

It can reduce the need to manually recreate supported network and application credentials after moving to another Windows computer or profile.

Password-Protected Export

The backup file is protected by a password selected during export. This provides an important layer of protection when the file is handled correctly.

Simple Graphical Workflow

Beginners can use the wizard without PowerShell scripting or direct manipulation of Windows credential files.

Preserves Supported Credential Entries

CredWiz can preserve credential targets and associated account information that might otherwise need to be entered again.

User-Scoped Operation

The wizard works with the signed-in user’s supported credentials rather than serving as a bulk export mechanism for every user on the computer.

Security Risks and Important Warnings

Warning: A .crd file contains sensitive authentication material. Anyone who obtains both the file and its password may be able to restore usable credentials.

Use these safeguards:

• Use a strong, unique password for the backup.
• Do not email the backup file and its password together.
• Do not store the file in a public or broadly shared folder.
• Prefer an encrypted removable drive or an approved encrypted repository.
• Restrict access to authorized users and administrators.
• Delete temporary copies securely after successful migration.
• Never upload the file to password-recovery or “CRD viewer” websites.
• Rotate high-value passwords if the file may have been exposed.
• Follow organizational retention and credential-handling policies.
• Do not restore an unknown .crd file.

Security monitoring products may flag unexpected use of credwiz.exe because credential export can also be abused by attackers. A CredWiz launch is not automatically malicious, but unplanned execution should be investigated, particularly on privileged administrator accounts.

CredWiz Limitations

CredWiz Compared with Related Windows Tools

Troubleshooting CredWiz

CredWiz Does Not Open

Try launching the executable directly:

C:\Windows\System32\credwiz.exe

If it still does not open:

1. Install pending Windows updates.

2. Restart Windows.

3. Check whether organizational policy or endpoint security blocks it.

4. Verify the Windows system files from an elevated Command Prompt:

   DISM.exe /Online /Cleanup-Image /RestoreHealth
   sfc /scannow

These commands require administrator privileges. Run DISM first, allow it to finish, and then run System File Checker.

The Backup Option Is Missing

Confirm that you opened CredWiz rather than only the modern Credential Manager page. On a managed computer, export features may also be restricted by organizational policy.

“Something Went Wrong” Appears

Possible causes include:

• A damaged credential-store entry
• An inaccessible backup destination
• Security software interference
• Insufficient access to the destination folder
• A Windows component problem
• Organizational restrictions

Try a local folder owned by the current user, review obsolete Credential Manager entries, restart Windows, and consult the administrator before disabling any security control.

The Backup Password Is Rejected

Check:

• Keyboard layout
• Caps Lock and Num Lock
• Whether the correct .crd file was selected
• Whether the password came from the correct password-manager entry

CredWiz does not provide a supported password-recovery mechanism for a forgotten backup password.

Credentials Are Missing After Restoration

Missing entries may be unsupported Web Credentials, browser passwords, application-specific tokens, certificates, passkeys, or credentials that were never included in the backup.

Review both Credential Manager categories and migrate unsupported items with the relevant application’s officially supported export or synchronization feature.

A Restored Credential Does Not Work

Delete the stale entry and authenticate again:

1. Open Credential Manager.
2. Select Windows Credentials.
3. Expand the affected entry.
4. Select Remove.
5. Reconnect to the resource.
6. Enter the current credentials when prompted.

Alternatively, an IT professional can inspect targets with:

cmdkey /list

To delete a known target:

cmdkey /delete:TARGET_NAME

Replace TARGET_NAME with the exact target shown by cmdkey /list. Do not delete entries indiscriminately.

Recommended Migration Checklist

Before replacing or reinstalling a computer:

1. Review Windows Credentials.
2. Remove obsolete credential entries.
3. Create and securely store the CredWiz .crd backup.
4. Export required certificates using the appropriate certificate-management tool.
5. Confirm browser-password synchronization or use the browser’s supported export process.
6. Record required VPN, Wi-Fi, Remote Desktop, and application configurations separately.
7. Back up user files and recovery keys.
8. Restore credentials only to an authorized destination.
9. Test each important resource.
10. Securely remove temporary backup copies after validation.

FAQ

Frequently Asked Questions

Is CredWiz a legitimate Windows program?

Yes. The legitimate Microsoft executable is normally located at C:\Windows\System32\credwiz.exe. An executable with the same name in another directory should be treated cautiously and checked with Windows Security or the organization’s security tools.

Does CredWiz work in Windows 11?

CredWiz is available on current Windows 11 installations, although its appearance and available options can vary by build, edition, policy, and account configuration.

Does CredWiz back up browser passwords?

No—not as a dependable browser-password migration method. Use the browser’s supported synchronization or export feature and protect any exported password file carefully.

Can I view passwords inside a .crd file?

No supported Microsoft workflow treats a .crd file as a readable password report. Restore it through CredWiz. Avoid third-party “viewer” or “decoder” services that require uploading the file.

Do I need administrator rights to use CredWiz?

Normally, a user can back up and restore supported credentials for their own account without administrative elevation. Organizational policy may impose additional restrictions.

Can I restore the backup to another computer?

That is a common use case. Sign in as the intended user on the destination computer, run CredWiz, and provide the backup password. Application compatibility, account status, security policies, and additional authentication requirements still apply.

What happens if I forget the backup password?

There is no supported recovery procedure for a forgotten .crd password. Keep it in an approved password manager and verify it before retiring the original computer.

Is a .crd file safe to store in cloud storage?

Only if the storage location is organizationally approved, strongly protected, and accessible solely to authorized users. For high-value credentials, prefer an additional encrypted container or encrypted removable storage.

Can IT use CredWiz to export every employee’s credentials?

CredWiz is user-scoped and interactive, not an enterprise bulk-credential migration system. Administrators should use approved identity, passwordless authentication, certificate-management, and application-deployment processes instead of collecting employee credential backups.

FINAL RECOMMENDATION / CONCLUSION

Use CredWiz when you need a simple, built-in method to migrate or preserve supported Windows Credentials for one user. Create the backup while the original Windows profile is still accessible, protect the .crd file with a unique password, store it securely, and verify important connections after restoration.

Do not treat CredWiz as a complete credential or disaster-recovery solution. Back up browser passwords, certificates, recovery keys, Wi-Fi settings, application data, and user files through their respective supported methods. In managed environments, obtain administrator approval before exporting or transferring corporate credentials.

 

#CredWiz #Windows11 #WindowsCredentials #CredentialManager #CredentialBackup #CredentialRestore #CRDFile #WindowsSecurity #PasswordSecurity #WindowsAuthentication #NetworkCredentials #CredentialMigration #ITSupport #WindowsTroubleshooting #SystemAdministration #Cybersecurity

SOURCES

• Microsoft Support — Credential Manager in Windows: https://support.microsoft.com/en-us/windows/security/credential-manager-in-windows
• Microsoft Learn — cmdkey command reference: https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/cmdkey
• Microsoft Learn — Credentials Processes in Windows Authentication: https://learn.microsoft.com/en-us/windows-server/security/windows-authentication/credentials-processes-in-windows-authentication
• Microsoft Q&A — Windows 10 backup of Windows and Web credentials: https://learn.microsoft.com/en-us/answers/questions/3156158/windows-10-backup-of-all-credentials-web-and-windo