Services like Dashlane and Bitwarden are unable to decrypt your passwords without your Master Password.
So, how does Chrome do it when they also state that your passwords are encrypted using your Google username and password?
-
It would be simple and easy to simply decrypt your passwords with the old credentials, then re-encrypt with the new ones. Just like you would do if you wanted to change your master password in Dashlane or any other password manager. – schroeder♦ Aug 15 '20 at 13:25
-
@schroeder I wanted to know about account recovery. Maybe I should edit. – webdaemon Aug 15 '20 at 13:37
-
1Just because you forgot your password does not mean Google did ... – schroeder♦ Aug 15 '20 at 13:42
-
@schroeder: it's probably only the master key that is encrypted (or just otherwise protected) using the password, though, i.e. not the protected contents directly. – Esa Jokinen Aug 15 '20 at 17:13
-
@EsaJokinen yep, from the available docs, it looks like they create a hash with the username and password and use that as a password on the master key. I can't confirm, though. – schroeder♦ Aug 15 '20 at 19:27
Add a comment
|
