Easily Show The Contents of Password Fields

Posted By Raymond In Category: Computer

Jul
13
2007
Donate

These past few days I’ve been giving tips on how to recover passwords from your browser. Out of all the tips, I think this is the best! It doesn’t require any software to reveal hidden passwords under asterisks and don’t need to waste your time in cracking master password.

Remembered I said it was impossible to view the hidden password under asterisks in Firefox? Well I was wrong. Turns out that there’s a way to do it. No software required, the result is immediate and it is shockingly easy to reveal the hidden password.

Continue reading to learn how to do it.


Here’s an example. As you can see, I have my GMail username and password saved in my Firefox browser.
Hack Gmail Password
If I’ve forgotten the master password, I can easily view the contents of password fields by simply entering a line of javascript below at the address bar and hit enter.

A dialog box will prompt and your password is shown!
Reveal Firefox Password

This method works on Internet Explorer, Firefox, Netscape and Opera. When I get to know about this method, I felt that even Firefox master password is rather useless. Turning off javascript will protect you from this hack but then you might face problems viewing websites that uses javascript.

Simple rule to protect your password. Do NOT save your password if you’re using a shared computer. If you’re using a public computer, make sure you clear the cache and private data just in case you accidentally saved your password.


Related posts:
  • Reset or Recover Firefox Master Password
  • Recover Windows Live Messenger Password and Also Hotmail Password
  • Change XP Administrator Password WITHOUT KNOWING IT
  • Setting Windows XP User Account with Random Password
  • Crack or Decrypt VNC Server encrypted password
    • Pingback: University Update - Firefox - Easily Show The Contents of Password Fields

    • Pingback: The Malaysian Blogosphere » Blog Archive » Raymond.CC: Easily Show The Contents of Password Fields

    • http://www.raymond.cc Nytrydr

      U THE KING !!!!!!

    • james

      given that you write
      “Remembered I said it was impossible to view the hidden password under asterisks in Firefox? Well I was wrong. Turns out that there’s a way to do it. No software required, the result is immediate and it is shockingly easy to reveal the hidden password”

      it’s obvious you didn’t figure this programming hack out yourself.

      Why don’t you provide the source for your tip? (people could google or read lots of books looking for it, but that’s besides the point)

      It’s pretty bad to only give people access to things after you’ve watered it down.

      It’s not a decent motivation to want people to be reliant on you.

    • http://www.raymond.cc/ Raymond

      Yeah James, obviously I didn’t figure this hack myself. I created this blog for me to record my own findings as I am sure I can’t remember everything I learn. So it doesn’t matter to me whether I include the source or not.

      If you want to find more information on it, just Google.

    • Tut

      Good tip.
      works even when its pre typed in or not lol :)

    • Sagar

      why auctionads instead of google adsense? what advantages?does it pay more?

    • Will

      This wouldn’t work for me in Firefox 2.0.0.4, but it did work in the latest IE, and the windows version of Safari.

    • Oluchi

      Raymond,
      You are really a rare gem.
      I have been following your lines and they are true and are working. Keep it up.
      I also want to ask. Could you let me know how to break administrative password.

    • http://www.raymond.cc/ Raymond

      Will, I am using Firefox 2.0.0.4 and it worked for me.

    • django

      maybe i’m getting something wrong, but there even is a nice gui option to show the saved passwords in firefox… edit > preferences > security > show passwords.

    • Pingback: AlbanyWiFi.com » Blog Archive » Easily Show The Contents of Password Fields

    • Pingback: Sposób na gwiazdki w Firefoksie « My Box

    • Pingback: Revelando las contraseñas guardadas en Firefox « www.Carzel.com

    • http://healthtreatments.blogspot.com Eliena Andrews

      I remember this was a firefox exploit. BUt u turned the exploit into pretty good manner to read and understand. That’s coool

      Eliena Andrews

    • http://www.raymond.cc/ Raymond

      Not all bad things are bad, depending on how you use it ;)

    • Flubber

      This script comes originally from Jesse Ruderman’s bookmarklets site: https://www.squarefree.com/bookmarklets/forms.html
      This works in all modern browsers, not just Firefox.

      There are other useful tools there, many of which work in all browsers like this one.

    • http://aksn1p3r.blogspot.com/2007/07/firefox-asterisk-revealer.html aksn1p3r

      Raymond thank you for finding the script… Squarefree’s bookmarklets are cool!

    • http://dustindiaz.com Dustin Diaz

      The Web Developer extension for Firefox already does this:
      https://addons.mozilla.org/en-US/firefox/addon/60

    • Pingback: PC Tips and Tricks - Reveal the contents of password fields

    • http://www.krunk4ever.com Krunk

      Firefox already supports viewing what your passwords are. I don’t see why I would need/want to execute some JavaScript to see what my password is. I guess it’s a feature not many know about, but if I’m searching a way to reveal my password, I would rather someone told me about finding it in the UI instead of executing some JavaScript code.

      Tools > Options > Security > Show Passwords > Show Passwords

    • http://www.raymond.cc/ Raymond

      Krunk, what if there is a Master Password? You can’t view the password…

    • Pingback: Easily Show The Contents of Password Fields

    • Pingback: Show Password Fields

    • http://www.raymond.cc/blog/archives/2007/07/13/easily-show-the-contents-of-password-fields/ Sahan

      anyway that is cool.

    • Pingback: links for 2007-11-21 « ThisIsSteve

    • Pingback: Muestra las contraseñas ocultas en el navegador - Incubaweb 2.0 Bitácora del Software, Web 2.0, Beta, Windows, Linux, Mac OS X, Open Source, ....

    • Pingback: Firefox Mastery » Can’t remember a Firefox password ? This will help

    • Pingback: A tiny bit of the internet » Blog Archive » JavaScript to show Saved Passwords

    • Pingback: Bitelia » Descubre las contraseñas ocultas tras asteriscos en tu navegador

    • Pingback: links for 2007-11-22 « Simply… A User

    • Pingback: Descubre las contraseñas ocultas tras asteriscos en tu navegador « Lestat-Blog De Seguridad Informatica

    • Pingback: Contraseñas a la vista en Firefox, IE y Opera

    • Pingback: Idea Grapes » Bookmarklet:顯示表單密碼欄位的內容

    • Pingback: Links for November 22nd, 2007 through November 23rd, 2007 at noahcarter.com

    • Pingback: links for 2007-11-24 at noahcarter.com

    • Pingback: Recuperar contraseñas guardadas en cualquier navegador

    • Pingback: links for 2007-11-24 « toonz

    • Pingback: Webtranslated.it » Blog Archive » Mostrare facilmente il contenuto del campo password

    • Pingback: Kris blogt » Blog Archive » links for 2007-11-29

    • Pingback: Ibrahimo’s Weblog » Reveal your passwords on Firefox…

    • http://www.hackosis.com Shane

      You can also just view the source code according to this post:
      http://sla.ckers.org/forum/read.php?4,16384,17849#msg-17849

    • Pingback: » links for 2007-11-23 | Paul Cowles

    • Pingback: My Stuff | Reveal Hidden Passwords

    • Pingback: Reveal Hidden Passwords With This Simple Code

    • Pingback: How to Retrieve Passwords From Asterisks

    • A7med

      Fantastic

    • Chris

      This isn’t a hack and there’s a much more conscise way to write the code:

      javascript:alert(document.getElementById(‘Passwd’).value);

      It works in both firefox & IE (and likely all browsers that support javascript)

      All that’s going on here is that you’re using javascript to get the value of an element (in my example — by the id of the tag) and in the verbose example above — by tag type (password). )

      woopee.. A hack would be a scenario where someone used an XSS hole to inject javascript like this into the page where it would get the value and then — additional javascript would forward the value to a remote webpage tha’ts waiting to read the value from a query string.

    • awesomelaz

      awesome script mann

    • Stacy

      why is it that astericks come up when passwords are typed?is it some sort of security feature or what?

    • http://www.asep1998.page.tl george

      it works!
      thank you very-very much!!!

    • sophia

      hi, i’ve been reading posts here on raymond.cc and find it very interesting though i tried some but failed coz im not good in pc’s.
      i just like to access my husband’s laptop to know what he has saved in his computer but it has password. need to know his laptop’s password the easiest way.

      please help and email me the procedure.

      thanks a lot

    • joe

      all i get is a pop up box that says passwords in forms on this page????
      now what ????

    • http://kbok.free.fr kbok

      The master password is still useful, since passwords dont appear until you enter it, so the “hack” has no effect.

    • hokdapi

      i can\’t use this trick to view my router wireless password,can anyone show me how to do it????

    • http://www.internetmuetze.de Rosie

      This is a great site. Thank you for your information. I THANK YOU I SALUTE YOU IT,S A AMZING SITE.

    • sanjeev

      it was extraordinary, i was also thinkig that it is possible but i was unable to do this.

    • LOL

      Puts cara, pra que um codigo deste tamanho so para visualizar isso?
      Da pra fazer isso com uma linha, e fazer funciona em qualquer navegador..

    • LOL

      javascript: alert (document.getElementById ( ‘passwd’). valor);

      Isso não funciona, não é todo webmaster, vamos dizer assim, que define o campo de senha com esse nome, muito menos o id… hahaha

    • LOL

      E volto a repetir, esse codigo que foi postado, tem muita coisa inutil, não precisa criar uma função pra isso..

    • somanath sahoo

      This is a great site but iwant to register in your site.so pls send the login .send newly information in my mailid

    • qwerty

      Thanks you so much – you make day brighter!

    • Arman

      Wow you are very good, Thanks its really great and helped !

    • http://thisistheemailthatiforgotthepassword)masterqiansho@gmail.com master eng

      hi please how can i know my password i forgot it and i dont know how i we do it and also i dont want to change the password

    • http://thisistheemailthatiforgotthepassword)masterqiansho@gmail.com master eng

      please how can i know my password i forgot it tell me pls

    • http://traivanclub.net Lê Hiếu

      If it’s yahoo password. What next to do ?

    • http://www.sicurezzaeprivacy.net/forum/ esseci

      Hi, it works on Google Chrome also
      Thank you

    • http://www.gossipland.us ali

      wow man
      i love u
      thankssssssssssss this is amazing , i forgot my pass but i had it saved on my desktop , this way i find it

    • nighteblis

      powerfull …..

      works on safari windows version and firefox 3.0.10

    • tom

      Realise this is old, but slight tweak to the code, stops it showing an alert, and just shows the relevent password box as plain text… might be handy if thers more than one password on the page…

      javascript:(function(){var F,j,f,i; F = document.forms; for(j=0; j<F.length; ++j) { f = F[j]; for (i=0; i<f.length; ++i) { if (f[i].type.toLowerCase() == "password") f[i].type = "text"; }}})();

    • tom

      in fact, make that a bookmark, and your sorted

    • Nick Savage

      On facebook, in opera nine, it comes back there are no stored passwords on this page.

    • Nick Savage

      Disregard the last comment, the post with this in it worked. javascript:(function(){var F,j,f,i; F = document.forms; for(j=0; j<F.length; ++j) { f = F[j]; for (i=0; i<f.length; ++i) { if (f[i].type.toLowerCase() == "password") f[i].type = "text"; }}})();
      But i swore I typed that password.

    • M3

      You are the best..!! no word…for you.. Perfect Hacker.. and perfect…. Geek…
      1 word..
      AWESOME!!!

    • bryan

      can u make a hack to make the current acc visible while logged in i wanna know it but not change it

    • shazzmin

      superb one!

      but there is another thing,,this works only if we type the password,,how to see unknown passwords???

    • sitthykun

      I got it, awesome.

    • ramesh

      superb article..

      Discovery is the new name for ‘Raymond’..

      Keep going.

      I like this article.

    • Nirmal

      Amazing trick whoever created it. It Rocks……

    • INXS

      nice trick man.well is it possible to read my secret answer in gmail coz they show them in asterisk. i dont remember my answer.i tried the above script too in firefox and IE but cudnt get through.can u help me out…thnx in advance .

    • Arjme

      Brilliant, thaks a lot!

    • yourmom:P

      Awesome!!!! I just opened up an age old gmail account if it werent for this it wudve been lost forever

    • rafsan

      Ohh man.How did u fund out such this thing.Its incredible.

    • loves

      Thank you it s very nice

    • Chethan

      Hey..i hav 1 problem by modifying autosaving feature..
      When i enter d username it shows d previous login records in d login field..so pls find a soln. for dis…thanx in advance

    • Waqas

      Good,

      But FireBug’s script feature enables a js-dev to see password as well.

      Nice effort though.

    • sajith

      You can try this too… i got the name of the password field using the firebug … U will get the id by viewing the source of the page..

      javascript:(function(){alert(document.getElementById(‘Passwd’).value) })();

    • Piruz

      Ohhhhhh thanks man, it’s awesome! :)

    • vijaypal sajwan

      it’s too Good…..!

    • Yoga Priya

      Thatz great man!!!!!!!!!! Excellant job….Congrats……

    • Yoga Priya

      Thatz great man!!!!! Excellant job…..

    • pile

      Congrats man…. you are the man :)

    • shahriar

      thankssssssssssssssss man toooooo good

    • http://blog.amwmedia.com Andrew Worcester

      I figured out how to do this without an alert box popping up. check it out :-)

      http://blog.amwmedia.com/post/3043988338/reveal-hidden-passwords-in-all-major-browsers

    • http://ZaFile.com zalila

      thank you for the lesson.

    • BAZ

      best one
      thanks!

    • mohsen

      hi
      i test on config adsl modem to show my pass
      but i see “There are no passwords in forms on this page”
      help me

    • shoikat

      Very nice….
      I got another solution. I have done using firebug.

      Step 1: just find password field id (Ex – password)
      Step 2: find submit button and add little javascript as follows:
      Login
      Step 3: just click Login
      All done

    • george Burme

      That trick is awesome!!!!!!!!!!!!!!!!!!!!

    • Charm

      where will i paste it?
      under the address bar??????????

    • ppet

      into address bar u retard…

    • Vimick

      this is completely useless if you use firefox…

      you dont need an addon. you don’t need a script. this is built in if the password is a saved passwor

      just go tools>options>security>saved password>show passwords…

      this will show you every single saved password for every single website you have saved a password for…

    • Cool

      This is amazing man, the only inconveniant is that it only works on the computer your using
      But it s really great =)
      Keep up the good work, your great

    • osei michael

      hi please sorry so i want a financia supor in my schooling

    • Anonymous

      Could you please clarify why this bookmarklet alerts “There are no passwords in forms on this page” for the website below. The website does have a password input box.

      https://www2.pbebank.com/main.html

      Thanks.

    • Cooper Shrieve

      Just a heads up: this also works on the newest version of Safari and Chrome (at least on my Mac)

    • Cooper Shrieve

      Just a tip: as of now (early November), this works on Safari (I’m using the newest version) and Google Chrome (also the newest version), at least on a Mac.

    Copyright © 2005-2012 - Raymond.CC Blog