Note: This file runs on all language versions of Windows 95.

This update is an enhanced security component that substantially strengthens the encryption used for the Microsoft Windows 95 password cache. The new component uses a 128-bit key, increased from a 32-bit key in the previous version. The new component also includes enhancements to the way passwords are stored in the .pwl file.

• When you download this upgrade, the previous .pwl file will be upgraded automatically to the new format.
• This component replaces the Mspwl32.dll and Net.exe files.
• Net.exe, which is usually run from the command line, will no longer use the password cacheùyou will be prompted for a password while using Net.exe.

Background

Windows 95 uses an optional caching mechanism to store network passwords on your computer. When you first type and save a password while connecting to a password-protected resource, you can choose to store the password in a local password list file. Subsequent login with a Windows 95 password unlocks the list and associates those stored passwords with the Windows 95 password. If you do not choose to use password caching, you must type the password each time you connect to a password-protected resource.

Recently, an algorithm was posted on the Internet which could be used to compromise the security used in the previous version of the password list file. If someone had access to the password list file on the hard disk of a computer running Windows 95, and the decryption algorithm, they could have been able to perform operations on the file that could generate the unencrypted password(s).