4

Services like Dashlane and Bitwarden are unable to decrypt your passwords without your Master Password.

So, how does Chrome do it when they also state that your passwords are encrypted using your Google username and password?

enter image description here

5
  • It would be simple and easy to simply decrypt your passwords with the old credentials, then re-encrypt with the new ones. Just like you would do if you wanted to change your master password in Dashlane or any other password manager. – schroeder Aug 15 '20 at 13:25
  • @schroeder I wanted to know about account recovery. Maybe I should edit. – webdaemon Aug 15 '20 at 13:37
  • 1
    Just because you forgot your password does not mean Google did ... – schroeder Aug 15 '20 at 13:42
  • @schroeder: it's probably only the master key that is encrypted (or just otherwise protected) using the password, though, i.e. not the protected contents directly. – Esa Jokinen Aug 15 '20 at 17:13
  • @EsaJokinen yep, from the available docs, it looks like they create a hash with the username and password and use that as a password on the master key. I can't confirm, though. – schroeder Aug 15 '20 at 19:27

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.