# How to crack password of s7-200 PLC CPU224 **URL:** \ **Category:** Siemens\ **Created:** [November 28, 2014, 7:23pm UTC](https://forumautomation.com/t/how-to-crack-password-of-s7-200-plc-cpu224/168 "2014-11-28T19:23:56Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![automate](https://forumautomation.com/letter_avatar_proxy/v4/letter/a/51bf81/32.png) [@automate](https://forumautomation.com/u/automate)\ **Post date:** [November 28, 2014, 7:24pm UTC](https://forumautomation.com/t/how-to-crack-password-of-s7-200-plc-cpu224/168/1 "2014-11-28T19:24:05Z")
HOw to crack S7-224 cpu password Hello friends anyone guide me how to crack password of s7-200 PLC CPU224…i forgot the password ---
**Author:** ![denizen](https://forumautomation.com/letter_avatar_proxy/v4/letter/d/848f3c/32.png) [@denizen](https://forumautomation.com/u/denizen)\ **Post date:** [November 28, 2014, 7:26pm UTC](https://forumautomation.com/t/how-to-crack-password-of-s7-200-plc-cpu224/168/2 "2014-11-28T19:26:04Z")
There is no easy way to do that. If you need to upload the program then you must connect directly to eeprom chip pins and read binary by special soft (can’t remember the name but you can find it on internet). Then there is some insturction how to find the password inside binary (again you can find it on internet). If you don’t need to upload the program you can replace the eeprom and then you will have empty plc ready for downloading new application ---
**Author:** ![ish\_gyan](https://forumautomation.com/letter_avatar_proxy/v4/letter/i/ac91a4/32.png) [@ish\_gyan](https://forumautomation.com/u/ish_gyan)\ **Post date:** [September 11, 2015, 1:50pm UTC](https://forumautomation.com/t/how-to-crack-password-of-s7-200-plc-cpu224/168/3 "2015-09-11T13:50:17Z")
Dear Denizen, we have one S7 226 CPU Siemens PLC, program is downloaded on PLC which is password protected, we don`t the password so not able to upload the program from PLC to PC. We have one EEPROM which is having the program, now please guide us which software we can use to read the password on binary and what are the exact steps to crack the password. Hope for the speedy positive reply, regards, Ishwar.M.G. ---
**Author:** ![naval21](https://forumautomation.com/letter_avatar_proxy/v4/letter/n/ba8739/32.png) [@naval21](https://forumautomation.com/u/naval21)\ **Post date:** [October 16, 2015, 7:42pm UTC](https://forumautomation.com/t/how-to-crack-password-of-s7-200-plc-cpu224/168/4 "2015-10-16T19:42:18Z")
use s7unpassword dowloading it from internet ---
**Author:** ![ziconeltai](https://forumautomation.com/letter_avatar_proxy/v4/letter/z/ad7895/32.png) [@ziconeltai](https://forumautomation.com/u/ziconeltai)\ **Post date:** [June 24, 2017, 3:04pm UTC](https://forumautomation.com/t/how-to-crack-password-of-s7-200-plc-cpu224/168/5 "2017-06-24T15:04:25Z")
Hi! 1.The first, You can use Hexa editor to change something of data of EEPROM. 2.The second, You use a Tool to get the Password if it was set level 3 or Convert level password from level4 to 3 if your PLC was set disable upload (password level 4). 3.The last, you re-write to EEPROM then you Can upload normally. ---
**Author:** ![amr\_tolba](https://forumautomation.com/letter_avatar_proxy/v4/letter/a/f07891/32.png) [@amr\_tolba](https://forumautomation.com/u/amr_tolba)\ **Post date:** [April 28, 2018, 7:12am UTC](https://forumautomation.com/t/how-to-crack-password-of-s7-200-plc-cpu224/168/6 "2018-04-28T07:12:41Z")
Dear ish\_gyan if you found the way to upload program, please till me its urgent for me ---
**Author:** ![akbar\_torkashwand](https://forumautomation.com/letter_avatar_proxy/v4/letter/a/f9ae1b/32.png) [@akbar\_torkashwand](https://forumautomation.com/u/akbar_torkashwand)\ **Post date:** [September 18, 2019, 11:00am UTC](https://forumautomation.com/t/how-to-crack-password-of-s7-200-plc-cpu224/168/7 "2019-09-18T11:00:07Z")
hello. I have Hexa editor . but which tool I need to get the password?