How to Recover Saved Passwords in Tencent QQ browser

This research article shows you all password secrets of Tencent QQ browser including where all your website passwords are stored, how it is stored and how to recover it automatically.

QQ Browser Password Secrets

QQ browser stores all your website login passwords in the “EncryptedStorage” file at following location

[Windows Vista/7/8/10]
C:\Users\[user_name]\AppData\Local\Tencent\QQBrowser\User Data\Default\

[Windows XP/2003] 
C:\Documents and Settings\[user_name]\Local Settings\Application Data\Tencent\QQBrowser\User Data\Default\

This “EncryptedStorage” file is stored in SQLite database format. It contains database table called “entries” where each website login details are stored.

Here are some of the interesting fields stored in this table,

str1 - main link of the website
str3 - login link of the website
str2 - username used for login
blob0 - password used for login (encrypted)
date - date when it is stored

Here str3, str2 and blob0 refers to website login link, username and encrypted password respectively.

QQ browser encrypts the website password using Windows DPAPI (Data Protection API) functions.

These DPAPI functions perform encryption of password using user and machine specific data. As a result encrypted password cannot be decrypted by another user or another computer.

Hence QQ browser password recovery has to be performed on the same computer as same user.

How to Decrypt QQ Browser Passwords

QQ uses Windows DPAPI function, CryptProtectData to encrypt the website password. We can decrypt this password using the function called CryptUnprotectData.

Here is the sample C++ program to decrypt the website passwords from QQ browser.

void DecryptPassword(char *passData, int passLen, char *password, int length)
{
	DATA_BLOB DataPassword;
	DATA_BLOB DataOutput;
	
	DataPassword.cbData = passLen;
	DataPassword.pbData = (BYTE *) passData;

	if( CryptUnprotectData(&DataPassword, NULL, 0, 0, 0, 0, &DataOutput) == FALSE )
	{
		printf("CryptUnprotectData failed with error 0x%.8x", GetLastError());
		return;
	}

	memcpy(password, DataOutput.pbData, DataOutput.cbData);
	password[DataOutput.cbData] = 0;
	
	
	printf("Successfully Decrypted Password is %s ", password);

}

How to Recover QQ Browser Passwords Automatically

Here is simple way to recover all your QQ browser passwords without worrying about where it is stored and how to decrypt it.

You can use our XenArmor Browser Password Recovery Pro software to instantly & easily recover all your saved website login passwords from QQ browser as shown in video below,

Here are the simple steps to recover all your saved passwords,

• Step 1: Download & Install Browser Password Pro from here
• Step 2: Next launch the software on your computer
• Step 3: It will automatically discover, decrypt and display all the saved QQ passwords as shown below

For more details, please refer to Online User Guide

Hope this article has helped you to understand the password secrets of Tencent QQ browser.

Let us know what do you think. Please comment below if you have any queries or suggestions.

Recommended Posts

Rise of Covid-19 Malwares: How to Protect Your Passwords from being Stolen

March 26, 2020

How to Recover Remote Desktop Password from UltraVNC

November 16, 2019

How to Recover Remote Desktop Password from RealVNC

November 16, 2019