Windows encrypted password and data store (DPAPI)

[Gwen-Dragon]

Most users do not know hat Windows uses a unique user master key (GUID) for encryption of logins and other secure storage data.

Copying login database for Vivaldi and other Chromium-like browsers for a restore after installing a new Windows on a new PC or new Windows user account does not give them back a readable login database.

Some information on Windows Data Protection API:

• You Cannot Access DPAPI Confidential Information After Reinstalling Windows on a Stand-Alone Computer
• Windows Data Protection
• How to recover a Vault corrupted by lost DPAPI keys
• Recover Windows User Account Credentials
• DPAPI Secrets
• Reversing dpapi and stealing windows secrets offline
• Operational Guidance for Offensive User DPAPI Abuse

[Pathduck]

Good stuff - make it a sticky?

Maybe add information about how users can migrate their passwords to a new system.

• Enable Vivaldi Sync and sync passwords to the new machine (recommended).
• Export passwords from chrome://settings/passwords and import on new machine.

[derDay]

@Pathduck said

Maybe add information about how users can migrate their passwords to a new system.

• Enable Vivaldi Sync and sync passwords to the new machine (recommended).
• Export passwords from chrome://settings/passwords and import on new machine.

you mean something like this?

[Pathduck]

@derDay said in Windows encrypted password and data store (DPAPI):

you mean something like this?

Yes. But it should be updated, and then linked from here. That page is hidden under tips&tricks for all platforms, and this page is very Windows-specific.

Also note that the password import/export is now gone from the list of flags, but the options are there at least for me so maybe they made it default.

[Gwen-Dragon]

@Pathduck said in Windows encrypted password and data store (DPAPI):

make it a sticky?

Done.

[Gwen-Dragon]

@Gwen-Dragon For users who need to export and import Vivaldi login database i suggest to read the thread https://forum.vivaldi.net/topic/14642/how-to-manually-backup-restore-transfer-your-profile-to-another-device

[carlosoctavio]

@derDay but to import and export password does not work anymore.

[Gwen-Dragon]

@carlosoctavio Please do not discuss missing flags in Vivaldi here.
This si only about the encryption for the Chromium login databases!

If you need help to import/export passwords, please read my article Vivaldi 2.9 – Enable PasswordImport

[ingamx]

i wonder how many of this 4k vivaldi community are developers?

[Hadden89]

This post is deleted!

[Gwen-Dragon]

@ingamx We have more than 10 developers.
Those who are interested read such list of background information.

[Inventer89]

How restore passwords after crash system or HDD?

[Gwen-Dragon]

@Inventer89 Restore Windows user and the SID
https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-7/ee681624(v=ws.10)?redirectedfrom=MSDN
Then you may recover the Windows encrypted data.

[arinamichel]

This post is deleted!