How to Recover Saved Passwords in Maxthon Browser (Step-by-Step Guide)

September 23, 2019

in Password Recovery, Password Secrets

No Comments

2622

In this guide, you will learn where Maxthon saves your passwords, how they are secured using encryption, and the easiest way to recover them instantly.

Maxthon Password Storage Location

Maxthon browser uses different encryption algorithms across versions. Below are the details for each version.

Maxthon v6.x & v7.x

Maxthon stores all your website login credentials in the below file location,

[Maxthon v7.x]
C:\Users\[user_name]\AppData\Local\Maxthon\User Data\Maxthon Guest Profile\Mx Login Data

[Maxthon v6.x]
C:\Users\[user_name]\AppData\Local\Maxthon\Application\User Data\Default\Login Data

This file is a SQLite database containing a table called “logins”, where all saved credentials are stored.

Important Fields in “logins” Table

origin_url => Website Page URL
signon_realm => Website Domain
username_value => Username or Email
password_value => Encrypted Password

Maxthon v5.x

Maxthon v5.x saves all the login passwords in file called “mxpwd.dat” at following location

C:\Users\[user_name]\AppData\Roaming\Maxthon5\Users\Guest\MagicFill\"mxpwd.dat

How Maxthon Encrypts Passwords

Here are the technical details on encryption methods used by different versions of Maxthon browser.

Maxthon v6.x & v7.x

Maxthon v7.x uses proprietary encryption method to encrypt all passwords.
(Below mentioned tool currently do not support its recovery)

Maxthon v6.x uses same Chromium-based browser based encryption model like Chrome, Edge, Brave browser etc.

Passwords are encrypted using a master encryption key stored in the “Local State” file:

C:\Users\[user_name]\AppData\Local\Maxthon\Application\User Data\Local State

The master key is stored in value name “encrypted_key” in Base64 format and protected using Windows DPAPI.

Final master key (32 bytes) is used to decrypt saved passwords using AES-256-GCM algorithm.

Maxthon v5.x

Maxthon browser encrypts password file “mxpwd.dat” using AES-EBC algorithm with key generated using SHA1 hash of the magic text.

On successful decryption, you will get original login file in SQLite database format. It contains table called “storage” that has separate entry for each website login and 3rd field contains entire website data in JSON format.

Here is the sample of site login entry in JSON format

{"version":"5.0","isManual":false,"form":{"origin":"https://www.facebook.com/","signon":"https://www.facebook.com/",
"action":"https://www.facebook.com/login/","default":false,"autocomplete":true,"ssl_valid":false,"vendor_id":0,
"blacklist":false,"password_attr":"id","password_id":"pass","password_value":"0z2QgQ+m3GzEAH36ROBm4w==",
"user_name_attr":"id","user_name_id":"email","user_name_value":"contact@xenarmor.com",
"elements":[{"id":"email","index":2,"name":"email","type":"email","value":"contact@xenarmor.com"},
{"id":"pass","index":3,"name":"pass","type":"password","value":"0z2QgQ+m3GzEAH36ROBm4w=="}]}}

Here fields action, user_name_value, password_value refers to website, username and encrypted password.

Maxthon encrypts the website password using AES-ECB-256 algorithm with static 32 byte magic key.

Finally it is converted to BASE64 format and stored in above JSON site data.

Important Note: Since Maxthon v6.x uses user-specific encryption, saved passwords cannot be decrypted from another user account or external drive unless advanced recovery methods are used (see solution at the end of this post).

How to Recover Maxthon Passwords Automatically

Recovering Maxthon passwords manually can be time-consuming due to multiple encryption layers.

With XenArmor Browser Password Recovery Pro, you can instantly recover all Maxthon passwords with a single click.

Follow these simple steps: