Skip to content

Chrome Password Decryptor - Recover locally saved accounts on Chrome (v80 and older versions) and other Chromium based browsers

License

Notifications You must be signed in to change notification settings

0xfd3/Chrome-Password-Recovery

Repository files navigation

Chromium-Password-Recovery

Recover locally saved accounts on Chrome and other Chromium based browsers. This project tested on Chrome v80 and new Edge Chromium. Also it working with old Chrome versions (v79 and below).

Chromium changed encryption mechanism on v80 and it using AES-256-GCM. This tool decrypt passwords with BCrypt functions. No need any DLL files.

For More Info

The new machanism of Chrome is as follows (from https://xenarmor.com/how-to-recover-saved-passwords-google-chrome/ ): New Chrome version (v80.0 & higher) uses Master Key based encryption to store your web login passwords.

Here is how it generates the Master Key. First 32-byte random data is generated. Then it is encrypted using Windows DPAPI (“CryptProtectData”) function. To this encrypted key, it inserts signature “DPAPI” in the beginning for identification.

Finally this key is encoded using Base64 and stored in “Local State” file in above “User Data” folder.

Below is the sample entry of encrypted master key.

"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEA0RGbegD...opsxEv3TKNqz0gyhAcq+nAq0"},

Now to store the web login password, Chrome encrypts it using AES-256-GCM algorithm with the above master key and 12-byte random IV data. Finally, it inserts signature “v10” to the encrypted password and stores it in above “Login Data” file.

About

Chrome Password Decryptor - Recover locally saved accounts on Chrome (v80 and older versions) and other Chromium based browsers

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages