Get Saved Passwords From Browsers

On most browsers, including Google Chrome and Firefox, a user may be asked if he/she wishes to save their passwords when signing in to a webpage in order to make their future log in process faster. What they don’t know is that when they click yes, that password can be seen by anyone else who uses the same machine. For my example, I will be using Google Chrome to find these passwords, but Firefox and other browsers have their equivalent pathways, so just try to follow along as best as you can.

Open the browser and head to the settings. From their look for a tab that have keywords such as “Manage Passwords” or “User Password”. You may have to click the “Show Advanced Settings at the bottom of the settings page”.

From their, click whatever seems to be the most likely place to find passwords. By now you should be displayed with a bunch of emails, where they have been used, and hidden passwords. If you hover your mouse over the password you intend to see, you will be able to put it in plain text. If no emails show up here, it means that your targets were smart enough to not trust this feature and you’ll have to find another way of getting access to their passwords. Obviously, I blacked out my emails and websites, but yours will look normal.

On certain sites such as Facebook and *ahem… (online banks) there is an autofill function on browsers such as Google Chrome and if you ever come across these sites with an already filled in login text box, you know you have the password. Take this for example: facebook.

Go over to the text box with the hidden password and right click on your mouse. Go to Inspect Element (Thats when you know you’re a 1337 HaX0r). Inspect Element shoud have already highlighted the line you are *puts on sunglasses* inspecting the element on. If it didn’t than use the picture below to see what the line looks like.

Double click and edit the part of the code that says “type=password” and make it say “type=text”. Then press enter and look at the text box that previously had the hidden password. The box should now show the password in plain text.