Firewall & Security
Cleartext Password Protection
Prevent storage of passwords in cleartext and enable token leak detection
Benefit
Prevents credential harvesting attacks that exploit cleartext password storage
Impact
highCommands (2)
Run these commands in an elevated PowerShell window (Run as Administrator). This is exactly what CodeWinOptimizer executes for this tweak.
Set-ItemProperty HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\WDigest -Name UseLogonCredential -Value 0
Set-ItemProperty HKLM:\SYSTEM\CurrentControlSet\Control\Lsa -Name TokenLeakDetectDelaySecs -Value 30
Warnings
- WDigest cleartext passwords allow attackers to harvest credentials using tools like Mimikatz after system compromise.
How to revert this tweak
- •In CodeWinOptimizer: disable the tweak again — the app restores the original values it recorded when it was applied.
- •Manually: reverse the change — re-enable the service, delete the registry value you created, or restore the previous value shown when you ran the commands.
- •With System Restore: press Win + R, run rstrui, and select the restore point that was created before the change.
Frequently asked questions
Do I need to restart?
Some changes apply immediately (many registry and network values). Others — services, GPU scheduling, power settings — only take full effect after signing out or restarting. If the change seems to have no effect, restart before troubleshooting.
Will it survive Windows updates?
Most values persist, but major Windows feature updates can reset policies, services and scheduled tasks. After a big update, come back to this page and re-check the tweak — the app also shows the current state before applying anything.
Is it reversible?
Yes, but this is a high-impact tweak: create a system restore point before applying it. You can revert it from CodeWinOptimizer (which records the original values), by restoring the previous values manually, or with System Restore.
Can I apply it manually?
Yes — every command listed above is exactly what the app runs. Open PowerShell as Administrator and run them one at a time, checking the output. For a guided flow with a restore point and one-click revert, use the app.