If you inherited a machine with a password‑locked Omron PLC and the original integrator is gone: You can often read the password using a (e.g., Wireshark with Omron dissector, or a simple serial logger) while CX-Programmer attempts to go online. The PLC sends the stored password hash (or plaintext) back to the software under certain conditions. This is not cracking — it’s reading what the protocol exposes. Use only on equipment you own.
Below is a comprehensive guide on how this process works, the risks involved, and the standard procedures for password recovery. Understanding Omron Toolbus and Passwords omron toolbus password download