13 Jul
Remembered I said it was impossible to view the hidden password under asterisks in Firefox? Well I was wrong. Turns out that there’s a way to do it. No software required, the result is immediate and it is shockingly easy to reveal the hidden password.
Continue reading to learn how to do it.
Here’s an example. As you can see, I have my GMail username and password saved in my Firefox browser.

If I’ve forgotten the master password, I can easily view the contents of password fields by simply entering a line of javascript below at the address bar and hit enter.
A dialog box will prompt and your password is shown!

This method works on Internet Explorer, Firefox, Netscape and Opera. When I get to know about this method, I felt that even Firefox master password is rather useless. Turning off javascript will protect you from this hack but then you might face problems viewing websites that uses javascript.
Simple rule to protect your password. Do NOT save your password if you’re using a shared computer. If you’re using a public computer, make sure you clear the cache and private data just in case you accidentally saved your password.
Technorati Tags: asterisks, javascript, password, firefox, IE, security, opera, netscape
: Copying this article to your website is strictly NOT allowed. However, if you like this article, you can use the HTML code below to directly link to this article.
How To Copy Text or Error Messages from Any Dialog Boxes in Windows Reveal Passwords Hidden Under Asterisks How To Find Hidden Passwords in Firefox Reset or Recover Firefox Master Password Login to Windows Administrator and Linux Root Account Without Knowing or Changing Current Password Bypass Compulsory Web Registration By Sharing Logins Preview and Download Selected Files and Contents in Zip Archive
Have computer technical problems? Get FREE help from Raymond.CC FORUM
68 Responses for "Easily Show The Contents of Password Fields"
[...] Link to Article firefox Easily Show The Contents of Password Fields » Posted at Raymond.CC [...]
[...] Continue reading to learn how to do it. (more…) [...]
U THE KING !!!!!!
given that you write
“Remembered I said it was impossible to view the hidden password under asterisks in Firefox? Well I was wrong. Turns out that there’s a way to do it. No software required, the result is immediate and it is shockingly easy to reveal the hidden password”
it’s obvious you didn’t figure this programming hack out yourself.
Why don’t you provide the source for your tip? (people could google or read lots of books looking for it, but that’s besides the point)
It’s pretty bad to only give people access to things after you’ve watered it down.
It’s not a decent motivation to want people to be reliant on you.
Yeah James, obviously I didn’t figure this hack myself. I created this blog for me to record my own findings as I am sure I can’t remember everything I learn. So it doesn’t matter to me whether I include the source or not.
If you want to find more information on it, just Google.
Good tip.
works even when its pre typed in or not lol
why auctionads instead of google adsense? what advantages?does it pay more?
This wouldn’t work for me in Firefox 2.0.0.4, but it did work in the latest IE, and the windows version of Safari.
Raymond,
You are really a rare gem.
I have been following your lines and they are true and are working. Keep it up.
I also want to ask. Could you let me know how to break administrative password.
Will, I am using Firefox 2.0.0.4 and it worked for me.
maybe i’m getting something wrong, but there even is a nice gui option to show the saved passwords in firefox… edit > preferences > security > show passwords.
[...] http://www.raymond.cc/blog/archives/2007/07/13/easily-show-the-contents-of-password-fields/ [...]
[...] chyba, że posiadają specjalne programy, crackery itp.). Jednak kilka dni temu Raymond na swoim blogu ujawnił, że fenomen gwiazdek [...]
[...] http://www.raymond.cc/blog/archives/2007/07/13/easily-show-the-contents-of-password-fields/ [...]
I remember this was a firefox exploit. BUt u turned the exploit into pretty good manner to read and understand. That’s coool
Eliena Andrews
Not all bad things are bad, depending on how you use it
This script comes originally from Jesse Ruderman’s bookmarklets site: https://www.squarefree.com/bookmarklets/forms.html
This works in all modern browsers, not just Firefox.
There are other useful tools there, many of which work in all browsers like this one.
Raymond thank you for finding the script… Squarefree’s bookmarklets are cool!
The Web Developer extension for Firefox already does this:
https://addons.mozilla.org/en-US/firefox/addon/60
[...] Raymond.cc Blog via aksn1p3r [...]
Firefox already supports viewing what your passwords are. I don’t see why I would need/want to execute some JavaScript to see what my password is. I guess it’s a feature not many know about, but if I’m searching a way to reveal my password, I would rather someone told me about finding it in the UI instead of executing some JavaScript code.
Tools > Options > Security > Show Passwords > Show Passwords
Krunk, what if there is a Master Password? You can’t view the password…
[...] rynmonar wrote an interesting post today onHere’s a quick excerpt [...]
[...] or similar javascript has been around for a while. This particular one was on raymond.cc (via etc.), but it needed to be fixed for some forms where fields have a null type property (an [...]
anyway that is cool.
[...] Easily Show The Contents of Password Fields » Raymond.CC Blog (tags: firefox javascript password) [...]
[...] Si eres de los que olvidan sus propias contraseñas introducidas en la multitud de webs, foros y servicios online que visitas apreciarás el código que ha elaborado Raymond.CC. [...]
[...] Raymond Posted under: Firefox, [...]
[...] Link: JavaScript to show Saved Passwords [...]
[...] Easily Show The Contents of Password Fields | Vía: [...]
[...] Easily Show The Contents of Password Fields » Raymond.CC Blog (tags: password security javascript firefox hack passwords web browser *) [...]
[...] Easily Show The Contents of Password Fields | Vía: [...]
[...] en Digg una noti según la cual mediante un simple código javascript – el artículo original es de este blog, por cierto – es posible averiguar qué caracteres se esconden tras los asteriscos al introducir [...]
[...] Explorer、Netscape和Opera這三種瀏覽器上面。至於作者說在Fireofx啟用主控密碼(Master [...]
[...] Easily Show The Contents of Password Fields – [...]
[...] Easily Show The Contents of Password Fields (tags: password passwords hack) [...]
[...] Raymond.cc – Firefox Asterisk [...]
[...] Easily Show The Contents of Password Fields » Raymond.CC Blog (tags: password security firefox hack) [...]
[...] Easily Show The Contents of Password Fields [...]
[...] Easily Show The Contents of Password Fields » Raymond.CC Blog (tags: firefox security password javascript) [...]
[...] is a really very helpful tip from Raymond.cc, simply paste a javascript code in your Firefox address bar and hit enter, a dialog box will appear [...]
You can also just view the source code according to this post:
http://sla.ckers.org/forum/read.php?4,16384,17849#msg-17849
[...] Easily Show The Contents of Password Fields » Raymond.CC Blog quick js password retrieval hack (tags: javascript hacks browser security) [...]
[...] But it doesn’t work with Firefox. However, there is a way to find the hidden characters in Firefox. All you need to do is paste a bit of Javascript code into your URL bar. Or you can create a bookmark or bookmarklet by right-clicking on your Bookmark toolbar and creating a new bookmark using the code. You can find a full explanation at the Raymond.CC Blog. [...]
[...] Source: Raymond.cc blog. [...]
[...] via raymond.cc [...]
Fantastic
This isn’t a hack and there’s a much more conscise way to write the code:
javascript:alert(document.getElementById(’Passwd’).value);
It works in both firefox & IE (and likely all browsers that support javascript)
All that’s going on here is that you’re using javascript to get the value of an element (in my example — by the id of the tag) and in the verbose example above — by tag type (password). )
woopee.. A hack would be a scenario where someone used an XSS hole to inject javascript like this into the page where it would get the value and then — additional javascript would forward the value to a remote webpage tha’ts waiting to read the value from a query string.
awesome script mann
why is it that astericks come up when passwords are typed?is it some sort of security feature or what?
it works!
thank you very-very much!!!
hi, i’ve been reading posts here on raymond.cc and find it very interesting though i tried some but failed coz im not good in pc’s.
i just like to access my husband’s laptop to know what he has saved in his computer but it has password. need to know his laptop’s password the easiest way.
please help and email me the procedure.
thanks a lot
all i get is a pop up box that says passwords in forms on this page????
now what ????
The master password is still useful, since passwords dont appear until you enter it, so the “hack” has no effect.
i can\’t use this trick to view my router wireless password,can anyone show me how to do it????
This is a great site. Thank you for your information. I THANK YOU I SALUTE YOU IT,S A AMZING SITE.
it was extraordinary, i was also thinkig that it is possible but i was unable to do this.
Puts cara, pra que um codigo deste tamanho so para visualizar isso?
Da pra fazer isso com uma linha, e fazer funciona em qualquer navegador..
javascript: alert (document.getElementById ( ‘passwd’). valor);
Isso não funciona, não é todo webmaster, vamos dizer assim, que define o campo de senha com esse nome, muito menos o id… hahaha
E volto a repetir, esse codigo que foi postado, tem muita coisa inutil, não precisa criar uma função pra isso..
This is a great site but iwant to register in your site.so pls send the login .send newly information in my mailid
Thanks you so much – you make day brighter!
Wow you are very good, Thanks its really great and helped !
hi please how can i know my password i forgot it and i dont know how i we do it and also i dont want to change the password
please how can i know my password i forgot it tell me pls
If it’s yahoo password. What next to do ?
Hi, it works on Google Chrome also
Thank you
wow man
i love u
thankssssssssssss this is amazing , i forgot my pass but i had it saved on my desktop , this way i find it
Leave a reply