The need to recover lost passwords is as old as password protection itself. Early utilities such as (1996) and L0phtCrack (1997) focused on Windows password hashes, offering both legitimate system‑administration uses and, inevitably, avenues for abuse. These tools introduced the concept of “brute‑force” or “dictionary” attacks—systematic attempts to guess a password by testing many possibilities.