Purge Cached Kerberos Tickets with klist

Delete all cached domain authentication tickets so Windows requests fresh ones with your new credentials.

WindowscmdkerberossecurityLow risk

Run klist purge in a command prompt to delete every cached Kerberos ticket for the current session.

01Command

Command

$ klist purge

02What it does

Windows caches Kerberos tickets for domain resources so file shares and apps do not re-authenticate every time. After a password change or account permission update, stale tickets can keep granting old access or cause "the trust relationship failed"-style errors until they expire. klist purge empties the cache instantly — the next access simply requests new tickets. Use klist (no arguments) to view what is currently cached before purging.

03Risk

RiskLow risk

!Warning: Purging forces re-authentication, so expect a brief prompt for credentials on the next network resource access.

04Undo

✓No undo needed — this command does not change persistent state.

05Sources

klist
Microsoft Learn · vendor-doc · 2026-09-17
Evidence: Documents klist purge, which deletes all Kerberos tickets from the current logon session cache, and klist tickets for viewing them.

Last verified: 2026-09-18 · Category: Security & Privacy

06Related solutions

Verify File Hashes with certutil -hashfile

Windowshashcmdsecurity

Built-in Windows command to compute MD5, SHA1 or SHA-256 hashes of any file.

Low risk ✓ 2026-09-17

Fix 'scripts is disabled on this system' with Set-ExecutionPolicy

WindowsTerminaldevelopersecurity

Understand PowerShell's execution policy scopes and set the one that lets you run your own local scripts without gutting the security model.

Medium risk ✓ 2026-09-17

Get a Full System Summary with systeminfo

WindowshardwarecmdDiagnostics

One command that shows OS version, install date, boot time, memory, network adapters and installed hotfixes.

Low risk ✓ 2026-09-17