V
V
Vova2020-04-24 13:03:25
Google Chrome
Vova, 2020-04-24 13:03:25

How does Google Chrome read its passwords?

Hello.
I have google chrome.
Chrome has a "remember password" feature.
In principle, you can go to the settings and see these same passwords.
Moreover, in order to see them, you need to poke a button, and ... chrome will require you to enter the password from the Windows account.
Judging by what I managed to google, DPAPI is used inside there.
And now the most interesting thing: if I just go to the Internet with chrome, then on the necessary sites it will quietly substitute my passwords, but at the same time it will not require a password from the Windows account.
How so?
How is it that in one case he can get the password from his database, and in the other he cannot?
(Yes, it seems that chrome stores passwords in encrypted form).

Answer the question

In order to leave comments, you need to log in

1 answer(s)
V
Vova, 2020-04-27
@JustMoose

In short, we managed to unearth the following.
1. passwords are really encrypted, cookies too
2. but not all, just because chromes are updated gradually
3. DPAPI was used for encryption, starting from chrome 81 - AES
4. a key is used for encryption (look for yourself where it comes from), key not tied to a Windows account, but tied to a machine, so you can decrypt passwords using only this key, but only on this machine (seemingly)

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question