Command to retrieve SharePoint farm/App pool account passwords

Farm account is the account which used by IIS to run Central Admin. Same way web applications and Service applications run in App Pools with their own credentials.

Along with central admin, we can also recover password of other app pools running accounts.

Lets assume we want to recover password of below app pool accounts
SharePoint Central Administration v4
SharePoint – 80
Some SharePoint Service App Pool

Here we can use IIS appcmd.exe to request the Password field from the ProcessModel section of the applicationHost.config file as like below :

cmd.exe /c $env:windir\system32\inetsrv\appcmd.exe list apppool "SharePoint Central Administration v4" /text:ProcessModel.Password

In above command we can replace "SharePoint Central Administration v4" with any app pool name to get the password.