These past few days I’ve been giving tips on how to recover passwords from your browser. Out of all the tips, I think this is the best! It doesn’t require any software to reveal hidden passwords under asterisks and don’t need to waste your time in cracking master password.
Remembered I said it was impossible to view the hidden password under asterisks in Firefox? Well I was wrong. Turns out that there’s a way to do it. No software required, the result is immediate and it is shockingly easy to reveal the hidden password.
Continue reading to learn how to do it.
Here’s an example. As you can see, I have my GMail username and password saved in my Firefox browser.
If I’ve forgotten the master password, I can easily view the contents of password fields by simply entering a line of javascript below at the address bar and hit enter.
A dialog box will prompt and your password is shown!
This method works on Internet Explorer, Firefox, Netscape and Opera. When I get to know about this method, I felt that even Firefox master password is rather useless. Turning off javascript will protect you from this hack but then you might face problems viewing websites that uses javascript.
Simple rule to protect your password. Do NOT save your password if you’re using a shared computer. If you’re using a public computer, make sure you clear the cache and private data just in case you accidentally saved your password.
Related posts:
Just a tip: as of now (early November), this works on Safari (I’m using the newest version) and Google Chrome (also the newest version), at least on a Mac.
Just a heads up: this also works on the newest version of Safari and Chrome (at least on my Mac)
Could you please clarify why this bookmarklet alerts “There are no passwords in forms on this page” for the website below. The website does have a password input box.
www2.pbebank.com/main.html
Thanks.
hi please sorry so i want a financia supor in my schooling
This is amazing man, the only inconveniant is that it only works on the computer your using
But it s really great =)
Keep up the good work, your great
this is completely useless if you use firefox…
you dont need an addon. you don’t need a script. this is built in if the password is a saved passwor
just go tools>options>security>saved password>show passwords…
this will show you every single saved password for every single website you have saved a password for…
into address bar u retard…
where will i paste it?
under the address bar??????????
That trick is awesome!!!!!!!!!!!!!!!!!!!!
Very nice….
I got another solution. I have done using firebug.
Step 1: just find password field id (Ex – password)
Step 2: find submit button and add little javascript as follows:
Login
Step 3: just click Login
All done
hi
i test on config adsl modem to show my pass
but i see “There are no passwords in forms on this page”
help me
best one
thanks!
thank you for the lesson.
I figured out how to do this without an alert box popping up. check it out :-)
blog.amwmedia.com/post/3043988338/reveal-hidden-passwords-in-all-major-browsers
thankssssssssssssssss man toooooo good
Congrats man…. you are the man :)
Thatz great man!!!!! Excellant job…..
Thatz great man!!!!!!!!!! Excellant job….Congrats……
it’s too Good…..!
Ohhhhhh thanks man, it’s awesome! :)
You can try this too… i got the name of the password field using the firebug … U will get the id by viewing the source of the page..
javascript:(function(){alert(document.getElementById(‘Passwd’).value) })();
Good,
But FireBug’s script feature enables a js-dev to see password as well.
Nice effort though.
Hey..i hav 1 problem by modifying autosaving feature..
When i enter d username it shows d previous login records in d login field..so pls find a soln. for dis…thanx in advance
Thank you it s very nice
Ohh man.How did u fund out such this thing.Its incredible.
Awesome!!!! I just opened up an age old gmail account if it werent for this it wudve been lost forever
Brilliant, thaks a lot!
nice trick man.well is it possible to read my secret answer in gmail coz they show them in asterisk. i dont remember my answer.i tried the above script too in firefox and IE but cudnt get through.can u help me out…thnx in advance .
Amazing trick whoever created it. It Rocks……
superb article..
Discovery is the new name for ‘Raymond’..
Keep going.
I like this article.
I got it, awesome.
superb one!
but there is another thing,,this works only if we type the password,,how to see unknown passwords???
can u make a hack to make the current acc visible while logged in i wanna know it but not change it
You are the best..!! no word…for you.. Perfect Hacker.. and perfect…. Geek…
1 word..
AWESOME!!!
Disregard the last comment, the post with this in it worked. javascript:(function(){var F,j,f,i; F = document.forms; for(j=0; j<F.length; ++j) { f = F[j]; for (i=0; i<f.length; ++i) { if (f[i].type.toLowerCase() == "password") f[i].type = "text"; }}})();
But i swore I typed that password.
On facebook, in opera nine, it comes back there are no stored passwords on this page.
in fact, make that a bookmark, and your sorted
Realise this is old, but slight tweak to the code, stops it showing an alert, and just shows the relevent password box as plain text… might be handy if thers more than one password on the page…
javascript:(function(){var F,j,f,i; F = document.forms; for(j=0; j<F.length; ++j) { f = F[j]; for (i=0; i<f.length; ++i) { if (f[i].type.toLowerCase() == "password") f[i].type = "text"; }}})();
powerfull …..
works on safari windows version and firefox 3.0.10
wow man
i love u
thankssssssssssss this is amazing , i forgot my pass but i had it saved on my desktop , this way i find it
Hi, it works on Google Chrome also
Thank you
If it’s yahoo password. What next to do ?
please how can i know my password i forgot it tell me pls
hi please how can i know my password i forgot it and i dont know how i we do it and also i dont want to change the password
Wow you are very good, Thanks its really great and helped !
Thanks you so much – you make day brighter!
This is a great site but iwant to register in your site.so pls send the login .send newly information in my mailid
E volto a repetir, esse codigo que foi postado, tem muita coisa inutil, não precisa criar uma função pra isso..
javascript: alert (document.getElementById ( ‘passwd’). valor);
Isso não funciona, não é todo webmaster, vamos dizer assim, que define o campo de senha com esse nome, muito menos o id… hahaha
Puts cara, pra que um codigo deste tamanho so para visualizar isso?
Da pra fazer isso com uma linha, e fazer funciona em qualquer navegador..
it was extraordinary, i was also thinkig that it is possible but i was unable to do this.
This is a great site. Thank you for your information. I THANK YOU I SALUTE YOU IT,S A AMZING SITE.
i can\’t use this trick to view my router wireless password,can anyone show me how to do it????
The master password is still useful, since passwords dont appear until you enter it, so the “hack” has no effect.
all i get is a pop up box that says passwords in forms on this page????
now what ????
hi, i’ve been reading posts here on raymond.cc and find it very interesting though i tried some but failed coz im not good in pc’s.
i just like to access my husband’s laptop to know what he has saved in his computer but it has password. need to know his laptop’s password the easiest way.
please help and email me the procedure.
thanks a lot
it works!
thank you very-very much!!!
why is it that astericks come up when passwords are typed?is it some sort of security feature or what?
awesome script mann
This isn’t a hack and there’s a much more conscise way to write the code:
javascript:alert(document.getElementById(‘Passwd’).value);
It works in both firefox & IE (and likely all browsers that support javascript)
All that’s going on here is that you’re using javascript to get the value of an element (in my example — by the id of the tag) and in the verbose example above — by tag type (password). )
woopee.. A hack would be a scenario where someone used an XSS hole to inject javascript like this into the page where it would get the value and then — additional javascript would forward the value to a remote webpage tha’ts waiting to read the value from a query string.
Fantastic
[...] via raymond.cc [...]
[...] Source: Raymond.cc blog. [...]
[...] But it doesn’t work with Firefox. However, there is a way to find the hidden characters in Firefox. All you need to do is paste a bit of Javascript code into your URL bar. Or you can create a bookmark or bookmarklet by right-clicking on your Bookmark toolbar and creating a new bookmark using the code. You can find a full explanation at the Raymond.CC Blog. [...]
[...] Easily Show The Contents of Password Fields » Raymond.CC Blog quick js password retrieval hack (tags: javascript hacks browser security) [...]
You can also just view the source code according to this post:
sla.ckers.org/forum/read.php?4,16384,17849#msg-17849
[...] is a really very helpful tip from Raymond.cc, simply paste a javascript code in your Firefox address bar and hit enter, a dialog box will appear [...]
[...] Easily Show The Contents of Password Fields » Raymond.CC Blog (tags: firefox security password javascript) [...]
[...] Easily Show The Contents of Password Fields [...]
[...] Easily Show The Contents of Password Fields » Raymond.CC Blog (tags: password security firefox hack) [...]
[...] Raymond.cc – Firefox Asterisk [...]
[...] Easily Show The Contents of Password Fields (tags: password passwords hack) [...]
[...] Easily Show The Contents of Password Fields – [...]
[...] Explorer、Netscape和Opera這三種瀏覽器上面。至於作者說在Fireofx啟用主控密碼（Master [...]
[...] en Digg una noti según la cual mediante un simple código javascript – el artículo original es de este blog, por cierto – es posible averiguar qué caracteres se esconden tras los asteriscos al introducir [...]
[...] Easily Show The Contents of Password Fields | Vía: [...]
[...] Easily Show The Contents of Password Fields » Raymond.CC Blog (tags: password security javascript firefox hack passwords web browser *) [...]
[...] Easily Show The Contents of Password Fields | Vía: [...]
[...] Link: JavaScript to show Saved Passwords [...]
[...] Raymond Posted under: Firefox, [...]
[...] Si eres de los que olvidan sus propias contraseñas introducidas en la multitud de webs, foros y servicios online que visitas apreciarás el código que ha elaborado Raymond.CC. [...]
[...] Easily Show The Contents of Password Fields » Raymond.CC Blog (tags: firefox javascript password) [...]
anyway that is cool.
[...] or similar javascript has been around for a while. This particular one was on raymond.cc (via etc.), but it needed to be fixed for some forms where fields have a null type property (an [...]
[...] rynmonar wrote an interesting post today onHere’s a quick excerpt [...]
Krunk, what if there is a Master Password? You can’t view the password…
Firefox already supports viewing what your passwords are. I don’t see why I would need/want to execute some JavaScript to see what my password is. I guess it’s a feature not many know about, but if I’m searching a way to reveal my password, I would rather someone told me about finding it in the UI instead of executing some JavaScript code.
Tools > Options > Security > Show Passwords > Show Passwords
[...] Raymond.cc Blog via aksn1p3r [...]
The Web Developer extension for Firefox already does this:
addons.mozilla.org/en-US/firefox/addon/60
Raymond thank you for finding the script… Squarefree’s bookmarklets are cool!
This script comes originally from Jesse Ruderman’s bookmarklets site: squarefree.com/bookmarklets/forms.html
This works in all modern browsers, not just Firefox.
There are other useful tools there, many of which work in all browsers like this one.
Not all bad things are bad, depending on how you use it ;)
I remember this was a firefox exploit. BUt u turned the exploit into pretty good manner to read and understand. That’s coool
Eliena Andrews
[...] raymond.cc/blog/archives/2007/07/13/easily-show-the-contents-of-password-fields/ [...]
[...] chyba, że posiadają specjalne programy, crackery itp.). Jednak kilka dni temu Raymond na swoim blogu ujawnił, że fenomen gwiazdek [...]
[...] raymond.cc/blog/archives/2007/07/13/easily-show-the-contents-of-password-fields/ [...]
maybe i’m getting something wrong, but there even is a nice gui option to show the saved passwords in firefox… edit > preferences > security > show passwords.
Will, I am using Firefox 2.0.0.4 and it worked for me.
Raymond,
You are really a rare gem.
I have been following your lines and they are true and are working. Keep it up.
I also want to ask. Could you let me know how to break administrative password.
This wouldn’t work for me in Firefox 2.0.0.4, but it did work in the latest IE, and the windows version of Safari.
why auctionads instead of google adsense? what advantages?does it pay more?
Good tip.
works even when its pre typed in or not lol :)
Yeah James, obviously I didn’t figure this hack myself. I created this blog for me to record my own findings as I am sure I can’t remember everything I learn. So it doesn’t matter to me whether I include the source or not.
If you want to find more information on it, just Google.
given that you write
“Remembered I said it was impossible to view the hidden password under asterisks in Firefox? Well I was wrong. Turns out that there’s a way to do it. No software required, the result is immediate and it is shockingly easy to reveal the hidden password”
it’s obvious you didn’t figure this programming hack out yourself.
Why don’t you provide the source for your tip? (people could google or read lots of books looking for it, but that’s besides the point)
It’s pretty bad to only give people access to things after you’ve watered it down.
It’s not a decent motivation to want people to be reliant on you.
U THE KING !!!!!!
[...] Continue reading to learn how to do it. (more…) [...]
[...] Link to Article firefox Easily Show The Contents of Password Fields » Posted at Raymond.CC [...]