Decrypting Locally Stored Google Chrome Passwords

Google Chrome, like other browsers, stores all saved passwords locally. The encryption key and the saved passwords are stored in binary format, accessible to the device owner. While encrypting and storing passwords is a good security measure, it raises concerns about the potential extraction of plaintext passwords by hackers. This prompts us to question whether saving passwords in web browsers is truly a smart move.

• Encryption and Local Storage:

  Web browsers, including Google Chrome, utilize encryption to store passwords locally. However, it’s important to acknowledge the vulnerability associated with this practice.

• Extracting Plaintext Passwords:

  If a hacker gains access to the user’s device, they can easily extract the encrypted passwords and attempt to decrypt them. This poses a significant security risk and raises doubts about the prudence of saving passwords in web browsers.

• Considerations for Password Security:

  Given the risks involved, it is crucial to adopt best practices for password security:

  • Implement a strong, unique master password to encrypt locally stored passwords effectively.
  • Regularly update your browser to ensure the latest security patches are in place.
  • Be cautious when using public or shared devices and consider alternative login methods or reputable password managers.
  • Educate yourself about phishing attacks and be vigilant in recognizing and avoiding them.

Proof of Concept (PoC):

Here are the steps to decrypt locally stored passwords in Google Chrome:

1. Let’s save a password in Google Chrome.

2. The encryption keys for those saved passwords are stored in JSON format and can be found at:

C:\Users\UserName\AppData\Local\Google\Chrome\User Data\Local State

3. The encrypted passwords are stored in an SQLite database and can be found at:

C:\Users\UserName\AppData\Local\Google\Chrome\User Data\Default\Login Data

4. Now we can use one of the publicly available tools to decrypt the passwords for us. In this example, we will be using a tool called “decrypt-chrome-passwords” by . You can find the tool at:
decrypt-chrome-passwords
This tool was written by: Jayden Oh Yicong

5. Once you have cloned the tool and installed its requirements, you can simply run the following command:

python decrypt_chrome_password.py