SnadBoy’s Revelation is a legendary utility from the late 1990s and early 2000s tech era. Its sole purpose was to unmask the actual text hidden behind password asterisks () in Windows applications.
Before modern browser cloud-syncing and dedicated password managers like 1Password or Bitwarden, users relied on Windows or individual applications to “remember” passwords locally. Over time, people inevitably forgot what lay beneath those dots. SnadBoy’s Revelation became an absolute classic tech lifesaver by solving this exact problem with a radically simple interface. How the Magic Worked
The utility was incredibly lightweight and did not require complex installation. It utilized a basic security oversight built directly into early Windows operating systems:
The Crosshair Tool: The application featured a small target or crosshair icon.
Drag and Drop: You would click and drag this crosshair away from the Revelation window and hover it over any password field in another application (such as Outlook, an FTP client, or a dial-up networking prompt).
The Reveal: As soon as the crosshair hovered over the asterisks, the underlying plain-text password instantly appeared inside the SnadBoy interface, ready to be read or copied. Why It Was a Lifesaver
Data Migration: When users bought a new computer, they frequently realized they didn’t know the login credentials to the email or internet accounts they had been using for years. Revelation allowed them to retrieve and document their own data before migrating.
No Cracking Required: Instead of spending hours or days running brute-force cryptographic password crackers, Revelation exploited the UI layer to yield instant results.
Dial-Up Restoration: In the era of dial-up internet and early broadband, ISPs handed out randomly generated alphanumeric passwords that were nearly impossible to memorize. Revelation was the go-to tool for IT professionals helping users recover these lost connections. The Security Blind Spot
While SnadBoy’s Revelation was a savior for forgetful users, it also highlighted a massive security flaw in Windows’ graphical user interface (GUI).
Windows treated the asterisk mask merely as a cosmetic font choice rather than an encrypted barrier. The operating system still knew the actual characters in the text box so it could send them to the server during authentication. Because early Windows versions lacked strict process isolation, any lightweight background program could ask that specific text box field for its contents, and the system would gladly hand it over. Why You Don’t See It Today
If you try to download SnadBoy’s Revelation on a modern operating system, you will face two major hurdles:
Operating System Fixes: Microsoft fixed this fundamental security flaw years ago. Modern versions of Windows enforce strict security boundaries between applications (User Account Control and process isolation), preventing one standard app from reading the UI elements of another.
Antivirus Triggers: Nearly every modern security suite and Windows Defender will immediately flag old “asterisk unmasker” tools as malware or a potentially unwanted program (PUP) because the exact same technique can be abused by malicious actors to steal credentials.
Today, web browsers allow you to easily view saved passwords through their settings menus, or via the “Inspect Element” developer panel by changing the input type from type=“password” to type=“text”. However, for anyone who managed PCs or struggled with forgotten credentials twenty years ago, SnadBoy’s Revelation remains a nostalgic hall-of-fame utility.
If you are trying to recover a specific lost password right now, let me know:
Is the hidden password inside a web browser or a desktop application?
What operating system (Windows, macOS, etc.) are you running?
I can guide you through the safe, modern equivalent steps to retrieve it!
Leave a Reply