6

I assumed that a connection was needed in order to login with a live ID, but I discovered that windows 8 allows me to log in even without internet.

This is convenient as I wouldn't want to be locked out of my computer, but how does it work?
If it's storing a local password, isn't that a dangerous security-wise?

(thinking for instance of somebody logging in locally with a fake password after changing it on the HDD, writing a mail offline which would then be sent with my ID when I connect with my real password)

Razor
  • 1,340

1 Answers1

4

Windows caches the password locally. This makes it possible to login without connection.
Would you be happy if Windows doesn't allow you to login and use your computer when you have no Wi-Fi connection?

It will deny login if the passwords do not match.

I guess it works similar to domain logons: if the domain controller is not available but the entered password matches the locally stored one, Windows allows logon. Even more, Windows does not contact the domain controller right away if the cached password matches, but it will validate the password on the domain if it doesn't, in case you changed it.

Of course, you have to be connected when you log in for the first time.

Alexey Ivanov
  • 4,428