Encryption key location
-
While reading about how not to trust browser pw-managers ...
I thunk about this "for us Vivaldi's:"
"At what location (?) does Vivaldi store it's encryption key (=sync key?) ..."
I'd like to know more about this subject, and to eyeball (check out) the folder in question ... (or anythin else related in telling med something else on this subject).
(Extract.from.article: "(...) While browser password managers store passwords in encrypted databases, they store the associated encryption keys unprotected, in predictable locations."
"Profile folder"
-
@Totto
Hi, the sync password is not saved in Vivaldi only the login password (If you enable this), it is saved encrypted on the Vivaldi sync server.
If you forget it nobody can restore it.
Such a statement from a company sells password manager software is a bit curious.
Windows is the safest OS of the world, says Microsoft.Cheers, mib
-
@Totto Hi, the encryption key for the password manager is stored in the
Local State
file under User Data, as the value ofencrypted_key
In Windows the encryption is controlled by DPAPI and linked to your logged in user credentials so the key is not enough by itself to decrypt the password.
https://en.wikipedia.org/wiki/Data_Protection_APIOne would need access to both your OS account and the Vivaldi files to access the decrypted password. On MacOS/Linux things are done differently and relies on OS keystores.
Note also that you should never rely on accurate data from someone trying to sell you a product as that page is clearly doing. The browser password manager is perfectly safe as long as you keep your OS account safe. And if you don't - well, then you got other problems
-
Brilliant answer, thx
& found ref. to it in said 'Local State' file
(can confirm it's not plaintxt, didn't expect it to either...): -
-
@Zalex108 I get now what you mean!
Same as above using json-editor tree-view of file: Local State
.
. -
Yes,
It's easier to manage JSON files with that App.In case of "wanting" more:
https://forum.vivaldi.net/topic/83213/guide-internal-v-files