(Question) How to d...
 
Notifications
Clear all

(Question) How to decode chrome android passwords

6 Posts
4 Users
0 Reactions
2,051 Views
(@droopy)
Estimable Member
Joined: 11 years ago
Posts: 136
Topic starter  

Any advance forensic from the forum, knows how to decode the Encrypted passwords from a chrome android version??
NOT for PC computers that are plenty of scripts in python for that, i need for ANDROID chrome version only!

File is located here
Use file '/data/data/com.android.chrome/app_chrome/Default/Login Data'

File is password_value (BLOB) format encrypted.

If someone has something PM or just put below the method.
(NOT for file extraction which is easy on rooted devices, i need HOW TO DECRYPT the password)

regards


   
Quote
jaclaz
(@jaclaz)
Illustrious Member
Joined: 18 years ago
Posts: 5133
 

Which device/version/etc.?

I mean, it seems like those are not encrypted by default in Android
https://hassaanaliw.github.io/2015/01/03/how-secure-are-your-chrome-passwords-on-android/
http//androidphonehub.com/apps/android-are-your-passwords-in-chrome-secure/

jaclaz


   
ReplyQuote
(@droopy)
Estimable Member
Joined: 11 years ago
Posts: 136
Topic starter  

@jaclaz

The chrome version i am testing is LATEST build from GooglePlay
Version 39.0.2171.93
I am on Android 4.4.2

Seems this LATEST build using a similar method for password encryption as it do on PC machine computers.

SQLITE inside shows password_value BLOB and it is encrypted.

Test with LATEST Google Chrome.

Any ideas?


   
ReplyQuote
(@dan0841)
Trusted Member
Joined: 17 years ago
Posts: 91
 

Seems this LATEST build using a similar method for password encryption as it do on PC machine computers.

SQLITE inside shows password_value BLOB and it is encrypted.

Test with LATEST Google Chrome.

Any ideas?

On Windows I think the password is encrypted using Triple DES using the Windows user account password as a key. I would hazard a guess that it's a similar mechanism but I'm not sure what the key is.

The last one I needed to do (Prob 6 months ago) was in clear like @jaclaz said. I guess they've done an update in the last few months. Chrome (certainly on computers anyway) is pretty hot at updating itself.


   
ReplyQuote
jaclaz
(@jaclaz)
Illustrious Member
Joined: 18 years ago
Posts: 5133
 

@jaclaz

The chrome version i am testing is LATEST build from GooglePlay
Version 39.0.2171.93
I am on Android 4.4.2

Seems this LATEST build using a similar method for password encryption as it do on PC machine computers.

SQLITE inside shows password_value BLOB and it is encrypted.

Test with LATEST Google Chrome.

Good ) , but you do not need to SHOUT at me, I usually can read and understand fine what is written (though often I cannot read what is NOT written, which is why I ask).
The info about the exact, specific version you were asking about was MISSING in your original post, while it was evidently NEEDED, since this is - it seems - a new feature of a new, specific version.

jaclaz


   
ReplyQuote
(@coligulus)
Estimable Member
Joined: 16 years ago
Posts: 165
 

This change will likely be due to the fact that pre 4.4.x Android used Webview, which is no longer used and which it has now stated it will no longer be patching. Google has left the OEM or bug submitters to deliver patches. Android now uses Chromium instead. This is likely while the file may have changed.


   
ReplyQuote
Share: