Home > Products > Windows Passwords > Reset Windows Password > Screenshots > IP history
View user IP address history
OneNote password recovery v3.4
Support for Microsoft Office 365
Reset Windows Password v14.2
Telegram data recovery, Photo Database and Media Player investigation tools, and some more
Office password recovery tools
Resetting VBA passwords
New blog post
Dumping the history of users' IP addresses in Windows

Articles and video

You may find it helpful to read our articles on Windows security and password recovery examples. Video section contains a number of movies about our programs in action

Reset Windows Password: IP address history

Introducing a cutting-edge and unparalleled feature (not available in any other program at the time) that empowers you to uncover the history of external IP addresses associated with any user account within the Windows operating system. This groundbreaking capability allows for in-depth analysis of users' network activities, providing insights into the specific IP addresses through which they have accessed the network and the corresponding timestamps.

Contrary to Microsoft's assertion that IP address history is not stored within the system, evidence suggests otherwise. Despite the dispersed nature of this information across the system, it has been revealed that the decryption and retrieval of external IP data for any user account is indeed achievable, shedding light on a previously obscure aspect of system operations.

Choosing user account

Setting user account to extract ip address history for

Select a user account for which the IP address history needs to be extracted.


Time filters

Setting ip history display filters

In the next step of the wizard, select the period for which you want to retrieve the information. Or click the 'Display all' to output all available entries.


Viewing IP address history

View user IP address history

The program extracts users' IP history from several Windows locations, including those that require further decryption. During this process, you may be prompted for the user's logon password. The decrypted IP history can be copied to the clipboard or saved as an HTML report.