To set a file sharing password in Windows 98, you must first enable "Share-level access control" in the Network properties. Right-click the folder you want to share, select Sharing, choose Shared As, and then pick the Access Type (Read-Only, Full, or Depends on Password). Enter your desired password in the provided fields. Note that Windows 98 passwords are limited to 8 characters and are stored in the .pwl file in the Windows directory.

Essential Security Warning for Legacy Systems

Windows 98 is a legacy operating system released over a quarter-century ago. It lacks modern security features such as kernels with memory protection, advanced user permissions, and secure networking protocols. The operating system relies on SMBv1 (Server Message Block version 1), a protocol that is considered highly insecure by today's standards and is susceptible to various exploits.

In a modern laboratory or home environment, a Windows 98 machine should never be connected directly to the public internet. It is best used within an isolated local area network (LAN) or a virtualized environment with no external access. If you are integrating a Windows 98 machine into a multi-device setup, ensure it sits behind a robust firewall that blocks all inbound and outbound traffic except for necessary local file transfers.

Foundations of Windows 98 Networking

Before managing passwords, the underlying network infrastructure must be correctly configured. Windows 98 does not enable file sharing by default. During my recent restoration of a 1999-era Pentium III machine, I found that many connection issues stem from missing protocol bindings rather than incorrect passwords.

Installing Necessary Network Components

To begin, navigate to the desktop and right-click the Network Neighborhood icon, then select Properties. In the Configuration tab, ensure the following components are installed:

  1. Client for Microsoft Networks: This is the primary redirector that allows the computer to act as a client on a Microsoft network.
  2. Network Adapter: This should be your physical Ethernet card or dial-up adapter.
  3. Protocols: While TCP/IP is the modern standard, Windows 98 often functioned better in small local environments using NetBEUI or IPX/SPX. For compatibility with modern routers, TCP/IP is required.
  4. File and printer sharing for Microsoft Networks: This service allows the computer to act as a server, sharing its resources with others.

If any of these are missing, click Add, select the corresponding category, and choose the item from the Microsoft list. You will likely need the original Windows 98 SE installation CD-ROM or the CAB files stored locally on the hard drive to complete this process.

Configuring File and Print Sharing

Once the service is installed, click the File and Print Sharing button within the Network Properties window. You must check the box labeled "I want to be able to give others access to my files" to enable the Sharing tab on individual folders. After clicking OK, Windows 98 will prompt for a system restart. This is mandatory, as the networking stack is initialized during the boot sequence.

Understanding Share Level vs User Level Access Control

A critical decision in Windows 98 networking is choosing the Access Control method. This is found under the Access Control tab in the Network Properties dialog.

Share Level Access Control

This is the default and most common setting for Windows 98. Access is granted based on passwords assigned to specific resources (folders or printers). It does not care who is connecting, only whether they provide the correct password for that specific share.

  • Pros: Simple to set up; no central server required.
  • Cons: Extremely weak security; anyone with the password has access; no individual accountability.

User Level Access Control

This method grants access based on a list of specific users and groups. However, Windows 98 cannot maintain a user database itself. To use this, you must have a "security provider," which is typically a Windows NT Domain Controller or a NetWare server.

In a modern retro-computing setup using a Linux server with Samba, you can emulate a Domain Controller to use User-level access, but for most standalone Windows 98 machines, Share-level access remains the standard choice.

How to Create a Password Protected Share

Once the system is rebooted and the sharing service is active, you can proceed to share individual directories.

  1. Locate the Folder: Open My Computer or Windows Explorer and find the folder you wish to share.
  2. Open Sharing Properties: Right-click the folder and select Sharing.
  3. Enable Sharing: Select the Shared As radio button.
  4. Name the Share: Provide a Share Name. Note that names longer than 12 characters or containing spaces might not be visible to older DOS-based machines on the network.
  5. Select Access Type:
    • Read-Only: Users can view and copy files but cannot delete or modify them. You can set a Read-Only Password.
    • Full: Users have complete control. You can set a Full Access Password.
    • Depends on Password: This unique feature allows you to set two different passwords. If a user enters the Read-only password, they are restricted; if they enter the Full access password, they get total control.
  6. Enter Passwords: Type the passwords into the respective fields. Windows 98 will ask you to confirm them in a second dialog box.

After clicking OK, the folder icon will change to include a small hand "holding" the folder, indicating that it is now shared on the network.

Technical Deep Dive into Windows 98 Password Security

The way Windows 98 handles these passwords is a fascination for IT historians but a nightmare for security experts. The system uses the LAN Manager (LANMAN) hashing algorithm.

The 8 Character Limit

One of the first frustrations users encounter is the length of the password. While Windows 98 might let you type a longer string in some fields, the actual network share password is effectively limited to 8 characters. This is a carryover from the older MS-DOS and Windows for Workgroups 3.11 networking protocols.

The LAN Manager Hash Vulnerability

The LANMAN hash is notoriously weak. It converts all characters to uppercase, splits the password into two 7-character halves, and encrypts each half independently. If your password is only 8 characters, the second half of the hash is essentially a constant for the remaining blank spaces, making it trivial for modern hardware to crack via brute force.

The .PWL File System

Windows 98 stores its local cache of passwords in files with the .pwl extension, located in the C:\WINDOWS directory. Each user who logs into the Windows 98 machine gets their own PWL file (e.g., default.pwl or admin.pwl).

In my testing, I observed that these files do not just store network share passwords; they also store passwords for dial-up networking and older versions of MSN. Because the encryption on these files was broken years ago, anyone with physical access to the machine can use a "PWL Viewer" tool to reveal all stored passwords in plain text within seconds.

Troubleshooting Network Password Prompts

A common issue in Windows 98 is the persistent "Enter Network Password" dialog that appears at startup or when trying to access a share.

Why the Password is Rejected

If you are certain the password is correct but it is still being rejected, check the following:

  1. Workgroup Name: Ensure all computers on your local network share the exact same Workgroup name (e.g., WORKGROUP). This is configured in the Identification tab of Network Properties.
  2. Protocol Mismatch: If one machine is using only NetBEUI and the other is using only TCP/IP, they will see each other's names but will fail to authenticate or share files.
  3. Primary Network Logon: Ensure this is set to "Client for Microsoft Networks" on the Configuration tab. If it is set to "Windows Logon," the network services might not initialize correctly for sharing.

The "Incorrect Password" Loop

If Windows 98 refuses to accept a password for a share that was previously working, it often indicates a corrupted .pwl file. The standard "old school" fix is to navigate to the C:\WINDOWS folder, find the .pwl file associated with your username, and rename it to .old. Upon the next reboot, Windows will ask you to provide a new logon password and will recreate a clean, uncorrupted password list file.

Connecting Windows 98 to Modern Windows 10 and 11

The biggest hurdle for modern users is the "SMBv1 Gap." Microsoft disabled SMBv1 by default in Windows 10 (Version 1709 and later) and Windows 11 due to security risks like the WannaCry ransomware.

Enabling SMBv1 on Modern Systems

If you must connect a Windows 10/11 machine to a Windows 98 share, you have to manually enable the SMBv1 client:

  1. Open the Control Panel on the Windows 10/11 machine.
  2. Go to Programs and Features > Turn Windows features on or off.
  3. Check "SMB 1.0/CIFS File Sharing Support."
  4. Restart the modern computer.

Caution: This significantly lowers the security of your modern machine. It is highly recommended to use a "bridge" device, such as a Raspberry Pi running an older version of Samba, or to use an FTP server on the Windows 98 machine instead of native Windows file sharing.

Recovering a Forgotten Windows 98 Share Password

If you have inherited an old Windows 98 system and the shared folders are password-protected, you aren't necessarily locked out.

Local Bypass

Since Windows 98 has no true local file system security (unless using third-party encryption), you can simply sit at the physical machine, right-click the shared folder, go to Sharing, and change the password or set it to "Not Shared" and then re-share it without a password. No "Administrator" password is required to change share settings once you are logged into the desktop.

PWL Recovery Tools

If you need to know what the original password was (perhaps because it's a password you used for other things decades ago), you can copy the .pwl files to a modern machine and use specialized legacy recovery software. Tools like "PWLView" were designed specifically for this purpose. They take advantage of the weak XOR-based encryption used in early Windows 98 versions to decrypt the contents.

Alternatives to Native File Sharing

Given the password and protocol headaches, many retro-tech enthusiasts have moved away from native SMB sharing. In my lab, I have found several alternatives to be more reliable:

  1. FTP (File Transfer Protocol): Running a small FTP server like "War FTP Daemon" on Windows 98 allows you to transfer files from any modern OS using a client like FileZilla without touching SMB settings.
  2. Web Server: Installing an old version of Apache or a simple "Single File Web Server" allows you to "download" files from your Windows 98 machine via a modern web browser.
  3. Physical Media: For small files, USB flash drives (using the "Universal Stack" drivers for Windows 98) or burning CD-RWs remains the most "secure" way to move data.

Frequently Asked Questions

What is the maximum length for a Windows 98 network password?
The effective limit is 8 characters. While the UI might allow more, the underlying LANMAN protocol truncates or fails to process longer strings correctly during the network handshake.

Why does Windows 98 ask for a password when I haven't set one?
This usually happens if "User-level access control" is enabled but there is no domain controller to authenticate you. Switch back to "Share-level access control" in the Network properties.

Can I share an entire hard drive in Windows 98 with a password?
Yes. You can right-click the C: drive in My Computer and follow the same sharing steps. This is often called an "Administrative Share" in later versions of Windows, but in 98, it's just a standard share.

Is it possible to have different passwords for different users on the same share?
Not with Share-level access. You can only have one "Read-only" password and one "Full access" password per folder. Everyone who knows the "Full" password has the same level of control.

Summary and Conclusion

Managing file sharing passwords in Windows 98 is a journey back to a simpler, albeit much less secure, era of computing. By ensuring that "Share-level access control" is selected and that the "File and printer sharing for Microsoft Networks" service is properly bound to your protocols, you can easily share resources across a local network.

However, one must always respect the limitations of the era: the 8-character password limit, the inherent weaknesses of the LANMAN hash, and the significant compatibility hurdles with modern Windows 10 and 11 systems. For the best experience, keep your Windows 98 machines on isolated networks and consider using FTP or physical media for more reliable data transfers in the modern age. Digital archaeology requires patience, but with these settings dialed in, your vintage hardware can still play a functional role in your tech ecosystem.