Reference Manual

Show Console


password - print a password hint

user - print user details

pcheck - password checking switch

rcheck - remote access switch

password [current [new]] Elevation required


pcheck [on | off]

sha1 pwd

sha1x pwd

sha256x pwd [flag]

pcheck.tcl pwd

rcheck [on | off]

Command password prints a password hint (if available).

If the current password is specified, it will be verified and the result printed.

If both the current password and a new password are specified, a hash of the new password will replace the value currently stored in the Windows Registry. Note that this operation requires elevation.

The current user details are:


The Username is the third value, and is always the Windows Account Name under which NAT32 is running. The fourth value is a password hint (if available).

Command pcheck turns password checking on or off. When password checking is on, the password must be entered to show or restore the Console window and the Quick dialog box.

Command pcheck.tcl checks the specified password for global uniqueness. This is done by sending the password hash to and analyzing the response.

Command sha1 prints the SHA1 hash of a specified password in base64 encoded form. Command sha1x prints the hash in hexadecimal form.

Command sha256x computes the SHA256 hash of pwd. If flag is specified, the hash is calculated twice and the result is saved in global variable phauth. This option is used for PiHole support.

Command rcheck turns the Remote Access Flag on or off. When on, remote access to certain exec command variants is permitted. When off, remote access to all exec command variants is blocked.

Forgotten passwords can be removed by deleting one of the following Registry values:
HKEY_LOCAL_MACHINE\Software\NAT Software\NAT32v2\Password
HKEY_LOCAL_MACHINE\Software\Wow6432Node\NAT Software\NAT32v2\Password

The default password is nat32v2 for generic editions of NAT32. This password is only valid if no Registry entry exists.

A password hint is only available for default passwords and for passwords that have been verified.

Hide, Web Interface