How to Recover Saved Passwords in Apple Safari Browser

In this article, you’ll learn where Safari browser stores your passwords, how they are protected, and how you can easily recover them.

Safari Browser Password Secrets

Safari browser saves all your website login passwords in file called “keychain.plist” at following location

[Windows Vista/7/8/10]
C:\Users\[user_name]\AppData\Roaming\Apple Computer\Preferences\keychain.plist

[Windows XP/2003] 
C:\Documents and Settings\[user_name]\Application Data\Apple Computer\Preferences\keychain.plist

Safari browser stores this “keychain.plist” file using Property List format. Upon conversion, you will get original file in XML format.

Here is the one of the site login entry from this XML file,

    <dict>
	<key>Account</key>
	<string>xenuser</string>
	<key>Data</key>
	<data>
	AQAAANCMnd8BFdERjHoAwE/Cl+sBAAAASYKymQaC1EK4WHRr83bF
	PgAAAAACAAAAAAAQZgAAAAEAACAAAACVNIT8v7HufW2NgYLPt7hI
	R7DbIz0wXI7eWbHrK6SlUwAAAAAOgAAAAAIAACAAAADNAk196AHY
	aK/OAwC8+gScOyrMwVyI3NhAAAAAns/zd6fLldu7n/RZ9iksCnN/
	pBiVyaDAUIyQnuPmA8F/Lp1sgRlg91ehbrDloeAU3pJuGQpC7TNl
	QAa/MTFE8A==
	</data>
	<key>Description</key>
	<string>Web form password</string>
	<key>Label</key>
	<string>www.google.com (xenuser)</string>
	<key>Server</key>
	<string>www.google.com</string>
    </dict>

Here website, username & encrypted passwords stored in values Server, Account, Data respectively.

Safari browser encrypts the password using Windows DPAPI (Data Protection API) functions. Finally encrypted password is converted to Base64 format and stored in in above mentioned file.

How to Decrypt Safari Browser Passwords

Safari uses Windows DPAPI function, CryptProtectData to encrypt the website password using the static salt data. We can decrypt this password using the function called CryptUnprotectData.

Here is the sample C++ program to decrypt the website password.

void DecryptPassword(char *passData, int passLen, char *password, int length, BYTE *salt, DWORD saltLength)
{
	DATA_BLOB DataPassword;
	DATA_BLOB DataOutput;
	DATA_BLOB OptionalEntropy;
	
	DataPassword.cbData = passLen;
	DataPassword.pbData = (BYTE *) passData;

	OptionalEntropy.pbData = (unsigned char*) salt;
	OptionalEntropy.cbData = saltLength;
	
	if (CryptUnprotectData(&DataIn, 0, &OptionalEntropy, NULL, NULL, 0, &DataOut) == FALSE)
	{
		printf("CryptUnprotectData failed with error 0x%.8x", GetLastError());
		return;
	}

	memcpy(password, DataOutput.pbData, DataOutput.cbData);
	password[DataOutput.cbData] = 0;
	
	
	printf("Successfully Decrypted Password is %s ", password);

}

How to Recover Safari Browser Passwords Automatically

Now you can easily recover all your forgotten passwords from Safari browser without any technical knowledge.

With just one click, XenArmor Browser Password Recovery Pro can recover all your saved Safari website passwords in seconds.

Follow these simple steps,

1. Download & install the software from here
2. Click on “Recover Passwords”
3. Instantly see all your saved Safari passwords

Here are the key features loved by users,

• Works across 140+ web browsers
• Recover all website passwords
• Also recover Form Autofill secrets (key, code, credit card etc)
• Extract from all profiles & custom locations
• Support command-line & automation
• Easily identify with multi-colored display
• Export secrets to PDF, HTML, CSV, JSON & more

👉 Free Download XenArmor Browser Password Recovery Pro