Go Down

Topic: Thinkpad supervisor password read /clear (Read 9616 times) previous topic - next topic


This script reads the supervisor password from the i2c eeprom (ATMEL 24RF08) in thinkpad laptops
in case of an encrypted password (passphrase set) the password can be cleared. (write to eeprom, last resort only!!)
There is tons of information about this on the web.
The missing piece was how to clear a password: just write 0x00 to all 16 password bytes.
Find the eeprom location of your laptop on those pages and connect some wires to it.

The hex dump can be imported into the program IBMPass to create a standard dump like the ones from the parallelport readers.

The eeprom is powered by 3.3V so use a voltage converter or power your arduino with 3.3V
This can be done easily with 2 arduino boards.
You can try using normal 5V but this can trash the mainboard.

Allways make a dump of the eeprom before attempting to clear the password!!!
Any damage to your device is your own fault.

I used it with a T40 and a X201.

Good luck


I have actually applied this method and recovered my password. It works and is worth about $120 because that is what a used IBM thinkpad R52 costs in India. Thanks a ton deif...you rock!!!


That's a nice hack.

I Wish I could do the same on my Dell Latitude.


Awesome! Worked 100% removing a password on a Thinkpad T410 with encrypted password. Way quicker than any other options I found. Excellent work!

Simply used 2k resistors and and 5v zeners to do the level shifting.


Can somebody please post some photos of the process?

I need to reset the supervisory password of my Lenovo Ideapad Z560.

Will this be applicable to Ideapads?


Hi guys! My first post here.

Do I understand correctly that I just need to hook up gnd, 11 and 12 pin to the chip directly?  and then run program in console?

In my case I am using intel edison because I have one handy and it is convenient to switch between 3.3 and 5v using edison arduino board.

When I run program "dry" no wires connected to edison then if I try to dump eeprom it goes "00 00 00..." infinitely

if I hook up wires only to edison pins gnd, 11, 12 and try to dump eeprom it will say some error reading eeprom obaviously :-)

Finally when I tried to actually use it I hooked it up correctly to the chip, powered on laptop(x230), tried to dump eeprom and it displays same error as if nothing was connected...

Can we use built in SCL SDA pins in arduino?



Worked nice on two T410s laptops and one T400.

I didn't have level shifter available, so I used 5V in data lines, no problems occurred.

P.S. I just made this account to thank you! This helped me a lot!


Hi! First message tells that you used this method with X201 too. But it has different eeprom chip, at least mine has MX25L6445E chip. I got the hex dump out of it but I just don't find mpv in it.

Go Up

Please enter a valid email to subscribe

Confirm your email address

We need to confirm your email address.
To complete the subscription, please click the link in the email we just sent you.

Thank you for subscribing!

via Egeo 16
Torino, 10131