How to Recover Saved Passwords in Brave Browser

September 23, 2019

in Password Recovery, Password Secrets

2 Comments

6084

In this guide, you’ll learn where Brave browser stores saved passwords, how they are encrypted, and the easiest way to recover Brave passwords instantly.

Brave Browser Password Storage Location

Brave browser stores all your website login credentials in a file named “Login Data”, located at:

[Brave Browser]
C:\Users\[user_name]\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Login Data

[Brave Beta Browser]
C:\Users\[user_name]\AppData\Local\BraveSoftware\Brave-Browser-Beta\User Data\Default\Login Data

[Brave Nightly Browser]
C:\Users\[user_name]\AppData\Local\BraveSoftware\Brave-Browser-Nightly\User Data\Default\Login Data

This file is a SQLite database containing a table called “logins”, where all saved credentials are stored.

Important Fields in “logins” Table

origin_url => Website URL 
signon_realm => Base domain 
username_value => Username or Email 
password_value => Encrypted Password

How Brave Browser Encrypts Passwords

Brave uses strong encryption methods to protect your saved passwords.

Older Versions (< v80)

Passwords were encrypted using Windows DPAPI
Easily decrypted using system APIs like CryptUnprotectData

Newer Versions (v80 & above)

Passwords are encrypted using a master encryption key stored in the “Local State” file:

C:\Users\[user_name]\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State

Encryption Key Details

Older versions (< v135): encrypted_key
Newer versions (> v135): app_bound_encrypted_key

This master key is Base64-encoded and secured using Windows DPAPI, along with AES-GCM, ChaCha20, or AES+CNG encryption based on the version.

Multi-Level Process to Decrypt Master Key

Decode Base64 key
Decrypt using System DPAPI
Decrypt again User DPAPI
If value is not 32 byte then decrypt it using AES-GCM, ChaCha20 or AES+CNG (v140+)

Final master key (32 bytes) is used to decrypt login passwords using AES-256-GCM algorithm

Important Note: Since Brave uses user-specific and machine-bound encryption, saved passwords cannot be decrypted from another user account or external drive unless advanced recovery methods are used (see solution at the end of this post).

How to Recover Brave Browser Passwords Automatically

Manually decrypting Brave passwords is complex—use a professional tool to recover them easily.

With, XenArmor Browser Password Recovery Pro, you can recover all Brave passwords in just one click.

Follow these simple steps: