Laka ʻana i ka ʻōlelo huna Vault: Ke kī huna 1Password i nalowale, Bitwarden 2FA Recovery Code, a i ʻole KeePass Keyfile (E unuhi ana i nā kau ʻana o ka pūnaewele pahemo i hoʻopaʻa ʻia)¶

Ke hoʻopaʻa ʻia ʻana mai kāu luna ʻōlelo huna (1Password, Bitwarden, KeePassXC, Proton Pass, a i ʻole LastPass) ma hope o ka hāʻule ʻana o ka motherboard laptop, hoʻihoʻi hou i ka hale hana kelepona, holoi ʻia ka ʻaoʻao polokalamu kele pūnaewele, a i ʻole ka nalowale ʻana o kāu 1Password Ki huna 34 hua'ōlelo (A3-XXXXXX-...), Bitwarden ʻElua-Step Login Code Recovery, a i ʻole KeePass .keyx ʻO keyfile kahi pilikia ʻike kikohoʻe koʻikoʻi. Hoʻopili nā luna ʻōlelo huna ʻike ʻole o kēia manawa i kāu vault ma ka ʻāina ma kāu kelepona me ka hoʻohana ʻana AES-256-GCM a i ʻole ChaCha20-Poly1305 i loaa mai ma o PBKDF2-HMAC-SHA256 a i ʻole Argon2id ma mua o ka pā ʻana o ka byte hoʻokahi i ke ao. No ka mea, ʻaʻole i loaʻa i ka mea hāʻawi kāu ʻōlelo huna, Key Secret, a i ʻole keyfile kūloko, kākoʻo mea kūʻai ma AgileBits (1Password) a i ʻole ʻo Bitwarden ʻaʻole hiki ke hoʻonohonoho hou i kāu ʻōlelo huna a hoʻokaʻawale paha i kāu waihona mai kā lākou mau kikowaena ma lalo o nā kūlana.

Eia nō naʻe, ʻaʻole i manaʻo ʻia ua pau kāu mau ʻōlelo huna no ka wā pau ʻole. ʻOiai ** ʻo kekahi mea i hoʻopaʻa ʻia ma mua ** (he kelepona kahiko, kahi papa lua, kahi pona hana, kahi ʻaoʻao polokalamu kele pūnaewele, kahi kākoʻo polokalamu iCloud a Google Drive, a i ʻole Windows Volume Shadow Copy / macOS Time Machine disk snapshot) e paʻa mau ana i kahi waihona i hoʻopili ʻia ma ka ʻāina (1Password.sqlite, Bitwarden data.json, a i ʻole .kdbx replica) a ʻike mau ʻoe i kāu Master Password (a i ʻole he biometric Touch ID / Face ID / Windows Hello i hoʻonohonoho ʻia ma kēlā ʻaoʻao lua), hiki iā ʻoe ke wehe i kēlā cache offline kūloko ma Airplane Mode a hoʻokuʻu aku i ka 100 pakeneka o kāu mau ʻōlelo huna ma mua o ka hoʻopau ʻana o ke kikowaena kapua i ka hōʻailona kau. For related credential emergencies, see lockout luna password a me ka hoʻihoʻi ʻana i ka ʻōlelo huna, Ua nalowale ka app authenticator TOTP i ka wā o ka hoʻonui ʻana i ke kelepona a i ʻole ka haki ʻana o ka pale, a ʻO ka laka MFA a me ka hoʻihoʻi ʻana i ka mea hōʻoia. Inā pili kāu laka i kahi palekana ola a i ʻole pilikia olakino, e kelepona i kāu helu ulia pōpilikia kūloko (911 ma ʻAmelika Hui Pū ʻIa a me Kanada, 112 ma waena o ka European Union, 999 ma United Kingdom) a i ʻole e ʻimi i kā mākou papa kuhikuhi o helu pilikia.

E hana i kēia i kēia manawa¶

1. E hoʻokomo i kēlā me kēia kamepiula lua, kelepona, a me ka papa i komo i kāu luna ʻōlelo huna Airplane Mode (Hoʻokaʻawale i ka Wi-Fi a wehe i ka Ethernet) MA mua o ka hoʻāla ʻana i ka pale a i ʻole ka wehe ʻana i ka app:
2. No ke aha ka hoʻokaʻawale ʻana i ka pūnaewele kāu neʻe mua: Inā ʻae ʻia kāu kau moʻokāki, ua hoʻihoʻi hou ʻia kāu hōʻailona 2FA, a i ʻole ua pau kāu kau inoa, i ka manawa 1Password a i ʻole Bitwarden app ma kāu kamepiula lua a i ʻole kelepona kahiko e pili ana i ka pūnaewele, koho ia i ka API mamao (my.1password.com a i ʻole identity.bitwarden.com), loaa he HTTP 401 Unauthorized a i ʻole ka hōʻailona hoʻopau manawa, a ** hoʻomaʻemaʻe ʻakomi i ka waihona huna huna pūnaewele kūloko (data.json / 1Password.sqlite) mai ka disk**.
3. ʻO ka mālama ʻana i ka hāmeʻa he 100 pakeneka ma waho e koi ai i ka papa kuhikuhi papa, ka polokalamu kelepona, a i ʻole ka hoʻonui ʻia ʻana o ka polokalamu kele pūnaewele e hāʻule i ka ** Offline Cache Unlock Mode**, e ʻae iā ʻoe e wehe i ka vault me ​​ka hoʻohana wale ʻana i kāu Master Password (a i ʻole biometrics) me ka ʻole o kahi code 2FA a i ʻole nā ​​lima kī huna hou.
4. Mai kaomi "Log Out", "Remove Account", "Clear Browser Data", a i ʻole "Reinstall App" ma kahi mea paʻa: ʻO ka haʻalele ʻana mai ka hoʻonui ʻia ʻana o ka polokalamu kele pūnaewele Bitwarden a i ʻole 1Password desktop app e holoi koke i ka mea i mālama ʻia. Secret Key property and encrypted vault blob. E waiho i ka app i laka ʻole ʻia a kope i kāna waihona ʻikepili noi kumu i kahi waihona mālama palekana ma mua.
5. E hoʻomaopopo i ka mea o nā ʻāpana laka ʻekolu āu e nalo nei:
6. Nalo 1Password Ki huna 34-Hōʻano (A3-...) (ʻoiai e ʻike mau ana i kāu ʻōlelo huna: mālama ʻia ke kī huna i loko o ka ʻikepili hoʻonohonoho kūloko o kēlā me kēia mea āu i kau inoa ai, i loko o kāu hoʻoiho. 1Password Emergency Kit.pdf, i loko o Apple Keychain (iCloud Keychain) ma Mac/iOS, a i ʻole i loko o kekahi waihona mea kahiko.
7. Nalo Bitwarden 2FA Authenticator / Recovery Code (ʻoiai e ʻike mau ana i kāu ʻōlelo huna kumu): No ka mea, ʻo ka 2FA wale nō ʻo Bitwarden i puka i ka ** hōʻoia server ** (ʻaʻole hoʻopili ʻia ʻo local vault encryption), kekahi mea i loaʻa kahi huna. data.json Hiki ke wehe ʻia ka faila ma ka disk me ka hoʻohana wale ʻana i kāu ʻōlelo huna Master, a i ʻole decrypted me ka hoʻohana ʻana i ka open-source offline Bitwarden vault extractors (bitwarden-decrypt).
8. Nalo KeePass / KeePassXC waihona kī (.key / .keyx) (ʻoiai e ʻike mau ana i kāu ʻōlelo huna kumu): Hoʻopili ʻia ka faila kī ma o SHA-256 into the composite master key; pono ʻoe e hoʻihoʻi i ka faila byte-for-byte pololei mai nā ʻāpana disk, Volume Shadow Copies, ʻōpala ao, a i ʻole ka polokalamu kele pūnaewele/OS hou-faila waihona.
9. Ma mua o ka wehe ʻana i kekahi waihona waho waho ma kahi ʻaoʻao lua, e hoʻopaʻa i kāna papa kuhikuhi waihona kūloko i kahi drive USB waho: Ma Windows, macOS, a i ʻole Linux, kope i ka mea holoʻokoʻa. %LocalAppData%\1Password, %AppData%\Bitwarden, a polokalamu kele pūnaewele Local Extension Settings waihona i kahi waihona ʻokoʻa a inā ʻaʻole hewa ka app a holoi i kāna huna huna, loaʻa iā ʻoe kahi kope maoli o ka waihona SQLite/JSON i hoʻopili ʻia.
10. Inā he kelepona a pona paha kāu mea i koe i hoʻopaʻa ʻia me ka wehe biometric (Face ID, Touch ID, Windows Hello) a poina iā ʻoe i ka ʻōlelo huna ponoʻī: Mai ** ʻaʻole ** e hoʻihoʻi hou i kēlā hāmeʻa (hoʻomaʻemaʻe ka rebooting i ke kī biometric i loko o ka RAM a hoʻoikaika i kahi ʻōlelo huna huna ma ka wehe mua ʻana). Wehe i ka polokalamu ma o Face ID a i ʻole Touch ID oiai ma ka Airplane Mode, e wehe i na palapala hoike mua loa, a nana lima a kope paha i na huaolelo a pau.
11. Huli i kēlā me kēia kamepiula, leka uila, waihona hoʻoiho, a me ka hoʻokele kapua no "Emergency Kit" a i ʻole "bitwarden_recovery_code" i kēia manawa: I ka manawa 1Password Ua hana mua i kāu moʻokāki, ua koi ia i kahi polokalamu kele pūnaewele e hoʻoiho i kahi faila i kapa ʻia 1Password Emergency Kit.pdf (a i ʻole mālama ʻia i kahi komo Passkey/Secret Key i loko o Apple Keychain Access). E holo i kahi hulina holoʻokoʻa ma mua o ka manaʻo ʻana ua hala ke kī.

Ka lāʻau hoʻoholo: ka hoʻāʻo ʻana i ka hoʻopaʻa ʻana i ka ʻōlelo huna a me ka wehe ʻana i ka vault offline¶

E hahai i kēia kaʻina hana hoʻolaʻa forensic e pili ana i ka luna ʻōlelo huna a me ka mea hōʻoia i nalowale iā ʻoe:

flowchart TD
    Start["Hoʻopaʻa ʻia mai ka ʻōlelo huna huna Vault (1Password, Bitwarden, KeePassXC, Proton Pass)"] --> IsolateNow["KANAWAI 1: E hoʻokomo i nā laptops lua, kelepona, a me nā papa i loko o ka AIRPLANE MODE koke (ma mua o ka wehe ʻana i ka polokalamu a i ʻole ka polokalamu kele pūnaewele)"]

    IsolateNow --> WhichApp{"ʻO wai ka luna ʻōlelo huna a me nā mea hōʻoia i nalo?"}

    WhichApp -->|"1Password: Nalowale 34-Char Key huna (A3-XXXXXX...), ʻike mau i ka ʻōlelo huna kumu"| OnePassCheck{"Loaʻa iā ʻoe kekahi mea i hoʻopaʻa ʻia (a i ʻole kahi Mac/iPhone Backup)?"}

    OnePassCheck -->|"ʻAe: Hoʻokomo ʻia ka App ma ke kelepona kahiko, papa, a i ʻole PC"| Extract1PKey["E wehe i ka App Offline -> Tap ikona moʻokāki -> 'Hoʻonohonoho i kahi mea ʻē aʻe' a i ʻole 'E nānā i ke kī huna' e hōʻike i ke kī piha A3-..."]

    OnePassCheck -->|"ʻAʻole: Loaʻa wale i ka Mīkini manawa, Windows Shadow Copy, a i ʻole ka waihona Hoʻoiho"| Search1PKit["Huli Disk & Backups no '1Password Emergency Kit.pdf', '1Password.sqlite', a i 'opvault' / 'b5.sqlite'"]

    WhichApp -->|"Bitwarden: Ua nalowale ka 2FA TOTP App & 2FA Recovery Code, ʻike mau i ka ʻōlelo huna Master"| BitwardenCheck{"Ke hoʻopaʻa ʻia nei ʻo Bitwarden Desktop a i ʻole Browser Extension ma kahi hāmeʻa (offline)?"}

    BitwardenCheck -->|"ʻAe: Loaʻa ka Vault Cached ma ka Disk"| UnlockBWOffline["E mālama i ka hāmeʻa ma ke ʻano mokulele -> Wehe i ka Bitwarden App/Extension Local me ka ʻōlelo huna -> Export Vault i .json / .csv -> A laila hoʻonohonoho hou i ka moʻokāki a me ka hoʻokomo hou."]

    BitwardenCheck -->|"ʻAʻole: Hoʻopaʻa ʻia ka hoʻonui ʻia a i waho paha, akā aia ʻo 'data.json' ma ka Disk/Backup"| DecryptBWJson["E kope i ka 'data.json' kūloko mai AppData a i ʻole Browser LevelDB -> Holo i ka 'bitwarden-decrypt' Python Script me kāu ʻōlelo huna."]

    WhichApp -->|"KeePass / KeePassXC: Nalowale Keyfile (.keyx/.key) a i ʻole .kdbx Poino"| KeePassRescue["1. E nānā iā KeePassXC '.kdbx.tmp' & Cloud Version History. 2. Huli Disk no Keyfile ma o 'Everything' / Photorec a i ʻole Windows Volume Shadow Copy (vssadmin)"]

    WhichApp -->|"Ua poina iā ʻoe iho ka ʻōlelo huna (Loaʻa i ka Biometric Unlock Active ma ke kelepona / kamepiula)"| BiometricRescue["MAI REBOOT DEVICE: E mālama i ke ʻano mokulele -> Wehe i ka Vault ma o Face ID / Touch ID / Windows Hello -> Kopi i nā ʻōlelo huna me ka lima."]

Māhele 1: Hoʻihoʻi hou i kahi nalowale 1Password Ki huna (A3-XXXXXX-...) a me ka waihona waho waho¶

1Password (nā mana 7 a 8) hoʻohana i kahi ʻelua-Secret Key Derivation (2SKD) hale hoʻolālā: kāu kī hoʻopunahele vault (MPK) ua loaʻa ma ka makemakika ma ka hoʻohui ʻana i kāu Master Password (via PBKDF2-HMAC-SHA256) me kahi 128-bit Secret Key i hoʻonohonoho ʻia ma ke ʻano he string 34-character e hoʻomaka ana me A3- (no ka laʻana, A3-ABCDEF-GHIJKL-MNOPQR-STUVWX-YZ1234-567890). Me ka ʻole o kēlā A3- Kī huna, ʻo ka ʻike ʻana i kāu ʻōlelo huna wale nō ʻaʻole lawa ka makemakika e hoʻokaʻawale i ka ʻikepili mai nā kikowaena 1Password.

Eia nō naʻe, ** ʻaʻole huna ʻia ka Key Secret mai kāu mau polokalamu ponoʻī **: ʻo kēlā me kēia mea i komo i loko o kāu moʻokāki 1Password e mālama i kāu piha piha. A3- Kī Huna ma kāna wahi hoʻopaʻa waihona no laila ʻaʻole pono ʻoe e paʻi i nā huaʻōlelo 34 i kēlā me kēia kakahiaka.

Hana 1: Hōʻike i kāu A3- Ki huna mai kekahi kelepona i kau inoa ʻia, papa, a i ʻole kamepiula¶

E nānā i kēlā me kēia atamai, iPad, laptop hana, a i ʻole ka polokalamu kele pūnaewele ma kahi āu i hoʻohana ai i ka 1Password (mālama i ka hāmeʻa ma Airplane Mode mua): 1. Ma 1Password 8 no IOS / Android: - E wehe i ka 1Password app -> kaomi i kāu ** moʻokāki / ʻike kiʻi ikona ** ma ka ʻaoʻao hema hema -> kaomi Set Up Another Device (a i ʻole Manage Accounts -> [Your Account] -> Set Up Another Device). - Kaomi View Account Details ma lalo o ka QR code: kou piha A3-... Hōʻike ʻia ke kī huna ma ka kikokikona maʻamau ma ka pale. E kākau koke ma ka pepa. 2. Ma 1Password 8 no macOS / Windows / Linux: - E wehe i ka 1Password -> kaomi i kāu ** inoa moʻokāki ** ma ka ʻaoʻao hema hema -> koho Set Up Another Device... -> kaomi secret key and sign-in address e hōʻike i ka pololei A3-... kaulahao. 3. Ma loko o kāu 1Password Vault iho: - ʻO kēlā me kēia moʻokāki 1Password e hoʻopuka maʻalahi i kahi mea i kūkulu ʻia i loko i kapa ʻia 1Password Account (login) i loko o kāu waihona Personal / Private i ka lā hoʻokahi. Inā hiki iā ʻoe ke wehe i ka 1Password offline ma kekahi mea hana, e ʻimi i kāu vault no 1Password Account; aia i loko o kāu Master Password a me kāu Secret Key.

Kaʻina 2: Wehe i kahi nalowale 1Password Ki huna mai Apple mai iCloud Keychain a i ʻole macOS Keychain Access¶

Inā ʻoe i kau inoa i loko 1Password ma ka iPhone, iPad, a i ʻole Mac me ka hoʻohana ʻana iā Safari a i ʻole ka app maoli, hāʻawi ʻia ka ʻōnaehana hana o Apple e mālama i kāu kikoʻī kau inoa 1Password a i ʻole Account Key i loko Apple Keychain / Passwords: 1. Ma macOS Sonoma / Sequoia (macOS 14 / 15+) a i ʻole iOS 17 / 18: - E wehe i ka Passwords app (a i ʻole System Settings -> Passwords) a wehe me ka Touch ID a i ʻole Face ID. - Huli no 1password.com aiʻole 1Password Account Key. - E nānā i ka inoa inoa i mālama ʻia, ka ʻōlelo huna, a i ʻole ke kahua memo: Safari a me 1Password no iOS e mālama pinepine i ka piha piha. A3-XXXXXX-... Ki huna i loko o ka palapala hōʻoia i mālama ʻia no my.1password.com. 2. Ma ka macOS Keychain Access (local items / iCloud): - Paʻi Cmd + Space, ʻano Keychain Access, a huli iā 1Password, agilebits, a i ʻole A3-. - Kaomi-lua i kekahi pili application password komo a nānā Show password.

Kaʻina 3: Wehe i ka A3- Ke kī huna a i ʻole ka waihona huna mai ka disk (1Password.sqlite & Emergency Kit.pdf)¶

ʻOiai ʻaʻole e wehe ʻia ka papa kuhikuhi 1Password a ʻaʻole hiki ke hoʻopaʻa ʻia kāu kamepiula (i kau ʻia ma ke ʻano he kaʻa lua a hoʻihoʻi ʻia mai kahi Time Machine / File History / Backblaze backup), e nānā i kēia mau wahi diski pololei:

Māhele 2: Hoʻihoʻi hou mai a Bitwarden 2FA laka (data.json ka wehe ʻana a me ka wehe ʻana i kahi huna huna)¶

Inā nalowale ʻoe i kāu polokalamu TOTP Authenticator, lako YubiKey, a me kāu Bitwarden Two-Step Login Recovery Code, nā kikowaena kapuaʻi o Bitwarden (vault.bitwarden.com) ʻaʻole e ʻae iā ʻoe e komo i loko o kekahi polokalamu kele hou a kelepona paha. Eia naʻe, hāʻawi ka hoʻolālā cryptographic o Bitwarden iā ʻoe i kahi pōmaikaʻi hoʻopakele koʻikoʻi: ** ʻO ka 2FA o Bitwarden wale nō e hōʻoia iā ʻoe i ka API pūnaewele; ʻAʻole ia he ʻāpana o ke kī hoʻopunipuni (masterKey / encKey) hoʻohana ʻia e hoʻopili i kāu faila vault kūloko (data.json)**.

ʻO ia ke ʻano inā ʻike mau ʻoe i kāu Bitwarden Master Password, a loaʻa iā ʻoe kekahi kamepiula, kelepona, a i ʻole backup i loaʻa kahi kope huna o Bitwarden kūloko. data.json a i ʻole IndexedDB / LevelDB mai ka wā i hoʻopaʻa ʻia ai ʻoe, hiki iā ʻoe ke hoʻokaʻawale i ka 100 pakeneka o kāu mau ʻōlelo huna ma waho.

Kaʻina 1: Wehe i kahi polokalamu Bitwarden i hoʻopaʻa ʻia a i ʻole hoʻonui i loko Airplane Mode¶

1. Hoʻokaʻawale loa i ke kamepiula a kelepona paha mai ka pūnaewele puni honua (hoʻopau iā Wi-Fi, wehe i ka Ethernet, hoʻā i ka Airplane Mode ma ke kelepona paʻalima).
2. E wehe i ka Bitwarden Desktop App, Browser Extension (Chrome, Brave, Edge, Firefox), a i ʻole Mobile App.
3. ʻOiai ka lōʻihi o ka app i loko o ka mokuʻāina "Locked" (e noi ana i kāu ʻōlelo huna huna a i ʻole PIN/Biometrics) ma mua o "Logged Out" (e noi ana i kāu leka uila), ** kaomi ʻana i kāu ʻōlelo huna ma waho e wehe koke i ka waihona huna kūloko me ka noi ʻole iā 2FA**.
4. E hele koke i Settings -> Vault options -> Export vault (a i ʻole File -> Export Vault ma ka Desktop), koho .json (ʻaʻole i hoʻopili ʻia ʻo JSON, no laila e hoʻopuka i nā māla maʻamau, nā URI, nā hua TOTP, a me nā hale waihona), e hoʻokomo i kāu ʻōlelo huna, a mālama i ka .json waihona i kahi pahu USB i hoʻopili ʻia a i ʻole pahu VeraCrypt.
5. Ke hōʻoia ʻoe ua lawe ʻia kāu mea i waho .json Aia ka waihona i kāu mau loina a pau i kahi hoʻoponopono kikokikona, hiki iā ʻoe ke hele palekana i vault.bitwarden.com/#/recover-delete (a i ʻole vault.bitwarden.eu/#/recover-delete), e holoi i ka mooolelo kapua 2FA, e hana i kahi mooolelo Bitwarden hou me ka leka uila like, a kaomi Tools -> Import Data -> Bitwarden (json) e hoʻihoʻi i kāu waihona holoʻokoʻa i 30 kekona.

Ke Kaʻina Hana 2: Decrypting o Bitwarden data.json a i ʻole Pūnaewele LevelDB pololei mai ka diski (bitwarden-decrypt)¶

He aha inā ʻaʻole e wehe ʻia ka polokalamu kelepona ʻo Bitwarden a i ʻole ka hoʻonui ʻia ʻana o ka polokalamu kele pūnaewele ma ka UI, a i ʻole e kau ʻia kāu kaʻa kamepiula mai kahi waihona, a i ʻole ʻoe wale nō ka waihona ʻikepili palapala noi?

1. ** E huli i kāu Bitwarden kūloko data.json a i ʻole ka waiho ʻana o ka hoʻonui ʻia ʻana o ka polokalamu kele pūnaewele ma ka disk** (e hana i kope kope o ka waihona ma mua o ka hoʻopā ʻana iā ia):

1. E hōʻoia i ka loaʻa ʻana o ka uku hoʻopaʻa ʻia i loko data.json:
2. Wehe i kāu kope data.json waihona ma kahi hoʻoponopono kikokikona (Notepad a i ʻole VS Code).
3. Huli i nā kaula "ciphers_ a me "encKey" (a i ʻole "masterKeyEncryptedUserKey" ma Bitwarden hou stateVersion papahana).
4. Inā ʻike ʻoe i nā haneli haneli o "2.iv|ciphertext|mac" nā kaula ma lalo ciphers_<userId>, Ke noho nei kēlā me kēia ʻōlelo huna, memo, a me nā hua TOTP i loko pono o kēlā faila, i hoʻopili ʻia e kāu ʻōlelo huna.
5. Wehewehe data.json hoʻohana ma waho bitwarden-decrypt (Open-Source Python Utility):
6. Ma kekahi kamepiula me ka Python 3 i hoʻokomo ʻia, e hoʻoiho i ka open-source i hoʻopaʻa ʻia bitwarden-decrypt palapala (github.com/GurpreetKang/BitwardenDecrypt) ka mea e hoʻokō i ka pololei o Bitwarden PBKDF2-SHA256 / Argon2id + HKDF-Expand + AES-256-CBC-HMAC-SHA256 hierarchy kī ma ka ʻāina:

   pip install cryptography argon2-cffi
   python3 BitwardenDecrypt.py data.json --output recovered_vault.json
   

7. E hoʻokomo i kāu Bitwarden Master Password ke koi ʻia. Loaʻa ka palapala i kāu masterKey mai kāu leka uila a me Master Password, decrypts kou encKey (masterKeyEncryptedUserKey), a hoʻopuka i kahi maʻemaʻe a hiki ke heluhelu ʻia e ke kanaka recovered_vault.json Loaʻa i kēlā me kēia inoa inoa, ʻōlelo huna, hua TOTP, a me ka leka paʻa.

Māhele 3: Hoʻihoʻi hou mai a KeePass a i ʻole KeePassXC Nalo kīfile a i ʻole .kdbx palaho¶

ʻAʻole like me nā luna hoʻokipa kapuaʻi, KeePass 2.x a KeePassXC E mālama i kāu waihona ma kahi kūʻokoʻa .kdbx waihona (KDBX 4.x format) i hoʻopili ʻia me ka Composite Master Key. Inā ʻoe i hoʻonohonoho i kāu waihona e koi iā ** i kahi ʻōlelo huna kumu a me kahi faila kī (.key a i ʻole .keyx)**, Hoʻopili ʻo KeePass i nā mea kikoʻī o ka waihona kī me SHA-256 a hui pū i kēlā hash 32-byte me kāu hash password ma mua o ka holo ʻana Argon2d/Argon2id.

1. Pehea e ʻike ai i kahi kuhi hewa a holoi ʻia paha .key / .keyx Waihona kī (a i ʻole kiʻi/palapala i hoʻohana ʻia ma ke ʻano kīwī)¶

No ka mea, ua like ka nalowale ana o ka waihona kī me ka nalo ʻana o ke kī cryptographic 256-bit, ʻaʻole hiki iā ʻoe ke hoʻoikaika i kahi kī kī maʻamau i nalowale; pono ʻoe ** ʻimi i kahi kope like-byte o ka faila**: 1. E nana KeePassXC.ini / KeePass.config.xml e ʻike i ka inoa faila i hoʻohana hope ʻia a me ke ala o ka faila kī: - Hoʻopoina pinepine i nā mea hoʻohana * ʻo ia * faila ma kā lākou kamepiula a lākou i koho ai i kā lākou faila kī (nui nā mea hoʻohana e koho i kahi koho .jpg kiʻi, .pdf palapala, a i ʻole he faila i kapa ʻia ma ka USB drive). - E wehe i kāu faila hoʻonohonoho kūloko ma kahi hoʻoponopono kikokikona: - KeePassXC (Windows): %AppData%\KeePassXC\keepassxc.ini (a i ʻole %LocalAppData%\KeePassXC\keepassxc.ini) -> nānā ma lalo [LastDatabases] aiʻole LastKeyFiles. - KeePassXC (macOS / Linux): /Users/<Username>/Library/Application Support/KeePassXC/keepassxc.ini a i ʻole /home/<Username>/.config/keepassxc/keepassxc.ini. - KeePass 2.x (Windows): %AppData%\KeePass\KeePass.config.xml -> huli iā <KeyFilePath>. - ʻIke i ka inoa file a me ke ala waihona (E:\Keys\my_secret_pic.jpg) e haʻi iā ʻoe i ka lāʻau USB, kāleka SD, a i ʻole folder kapua e ʻimi ai. 2. E kalai i kahi holoiia .keyx XML Keyfile mai ka wehe ʻole ʻia ʻana o ka disk i 60 kekona: - Kūlana KeePass / KeePassXC nā waihona kī i hana ʻia (.keyx a i ʻole .key ʻO ka format XML) he liʻiliʻi (< 1 KB file) e hoʻomaka me kahi poʻomanaʻo XML ʻokoʻa:

<?xml version="1.0" encoding="utf-8"?>
<KeyFile>
    <Meta>
        <Version>1.00</Version>

2. Hoʻoponopono i kahi pōʻino .kdbx waihona (Invalid signature a i ʻole HMACHashMismatch ma hope o ka pau ʻana o ka mana a i ʻole ka hoʻonohonoho ʻana i ke ao)¶

Ina kou .kdbx kiola waihona Not a KeePass database a i ʻole Corrupted database / HMAC mismatch ma hope o ka ulia kamepiula a i ʻole Google Drive / OneDrive sync paika: 1. Himi huna .kdbx.tmp a i ʻole .kdbx.bak atomic-kākau i nā faila kaikaina: - Ma ka paʻamau, KeePassXC hoʻohana i ka Safe Save (Atomic Write): kākau ʻo ia i nā loli i kahi faila manawa i loko o ka waihona hoʻokahi, a laila hoʻololi i ka inoa ma luna o ka waihona kumu. .kdbx. E nānā i ka papa kuhikuhi like (me nā faila huna i hoʻohana ʻia) no kekahi .tmp, .bak, a i ʻole kope paio (Passwords (Conflicted copy).kdbx). 2. Hoʻihoʻi i ka mana o nehinei mai Cloud Version History a i ʻole Windows Shadow Copy: - Ina kou .kdbx e noho ana i loko o Dropbox, Google Drive, OneDrive, a i ʻole iCloud Drive, e komo i loko o ka waihona pūnaewele kapua ma kāu polokalamu kele pūnaewele, kaomi ʻākau i ka .kdbx faila, a koho Version History e kiʻi i ka hoʻoponopono maʻemaʻe mua ma mua o ka palaho. 3. E holo i ka KeePass 2.x i kūkulu ʻia Repair Mode Kau mai: - E wehe i ka mana KeePass 2.x ma Windows -> hana i kahi waihona waihona hakahaka hou loa -> kaomi File -> Import... -> koho KeePass KDBX (2.x) (Repair Mode) -> kuhikuhi iā ʻoe i kāu palaka .kdbx faila a hoʻokomo i kāu ʻōlelo huna. ʻAʻole nānā ka Repair Mode i nā kahawai HMAC footers a hoʻopakele i kēlā me kēia poloka komo hiki ke heluhelu ʻia a hiki i ka offset byte ʻino.

Māhele 4: Wehe i nā waihona huna mai IOS, Android, a me nā kākoʻo macOS (iMazing, Time Machine, a DPAPI nā waihona hoʻomanaʻo)¶

He aha inā ua nalowale kāu kelepona mua, ʻaihue, a i ʻole ka hoʻonohonoho ʻana o ka hale hana, a ua holoi ʻia a i waho paha kāu kamepiula, e waiho ana iā ʻoe me ka ʻole o nā kau ola ola? Hiki iā ʻoe ke unuhi i ka waihona huna huna huna mai kahi iPhone local backup, macOS Time Machine snapshot, a i ʻole Windows hibernation / crash dump file.

1. E unuhi ana 1Password a i ʻole Bitwarden SQLite/JSON vaults mai kahi iPhone a iPad paha (iMazing / idevicebackup2)¶

I kēlā me kēia manawa e hoʻihoʻi ʻoe i kahi iPhone a i ʻole iPad i kahi Mac a i ʻole Windows PC (ʻoi aku ka Encrypted Local Backup ma Finder a i ʻole iTunes), hopu ka waihona waihona i nā pahu pahu palapala noi. 1Password a Bitwarden: 1. Mai hoʻihoʻi i ka waihona ma ke kelepona pili pūnaewele ola mua: Inā hoʻihoʻi ʻoe i ke kākoʻo ma ke kelepona e pili ana iā Wi-Fi i ka wā o Setup Assistant, e ping koke ka app i hoʻihoʻi ʻia i ke kikowaena kapua a holoi i kāna hōʻailona pau. 2. Hoohana iMazing a i ʻole iBackup Viewer ma ke kamepiula hoʻopahemo no ka nānā ʻana i ka waihona waihona waihona maka: - E wehe i kāu waihona iPhone kūloko i loko iMazing (File System -> Apps -> 1Password a i ʻole Bitwarden). - No 1Password: Hele i AppDomainGroup-group.com.agilebits.onepassword-ios/Library/Application Support/1Password/Data/ a unuhi 1Password.sqlite (a i ʻole B5.sqlite). Iloko o ka accounts ʻO ka papa o kēlā faila SQLite e noho ana i kāu kikokikona A3-XXXXXX-... Ki huna. - No Bitwarden: Hele i AppDomainGroup-group.com.8bit.bitwarden/Library/Preferences/ a unuhi group.com.8bit.bitwarden.plist. E hoʻohuli i ka binary .plist i XML (plutil -convert xml1 group.com.8bit.bitwarden.plist) a wehe iā ia i loko o kahi mea hoʻoponopono kikokikona: loaʻa ka mea like ciphers_<userId> a masterKeyEncryptedUserKey Hoʻohana ʻia nā hale JSON e BitwardenDecrypt.py, hiki iā ʻoe ke hoʻokaʻawale i kēlā me kēia ʻōlelo huna ma waho me ka hoʻohana ʻana i kāu ʻōlelo huna.

2. E unuhi ana Proton Pass, Dashlane, a LastPass hoʻopahemo hoʻopaʻa inoa huna¶

Inā pili kāu laka Proton Pass, Dashlane, a i ʻole LastPass: - **Proton Pass ʻO ke ʻano hoʻopahemo a me ka hoʻonui ʻia ʻana o ka Pūnaewele **: Hoʻopaʻa ʻo Proton Pass i kahi kiʻi paʻi kūloko i hoʻopili ʻia i loko o Chromium IndexedDB (chrome-extension_<id>_0.indexeddb.leveldb). Inā mālama ʻoe i kāu kamepiula i ka Airplane Mode, wehe i ka polokalamu kele pūnaewele, a wehe i ka Proton Pass me kāu ʻōlelo huna a i ʻole PIN, hiki iā ʻoe ke komo i kāu waihona waho waho a hoʻokuʻu aku a nānā paha i kāu mau hōʻoia ma mua o ka hoʻopili hou ʻana i ka pūnaewele. - LastPass Huke Pahemo Kūloko (lpall.slp / acct.slp): Ma Windows (%LocalAppData%\LastPass a i ʻole %AppData%\LocalLow\LastPass) a me macOS (/Users/<Username>/Library/Application Support/LastPass), hale kūʻai ʻo LastPass i kahi AES-256 i hoʻopili ʻia i ka faila cache XML/SQLite kūloko i kapa ʻia ma hope o kāu hash leka uila. ʻO ka wehe ʻana i ka Wi-Fi a me ka hoʻopaʻa inoa ʻana i ka hoʻonui ʻia ʻo LastPass me kāu ʻōlelo huna e kāʻalo i nā mea hōʻoia multifactor i haki ʻia a wehe pololei i ka hale waihona pūnaewele kūloko.

3. Ke hoʻolei nei i kahi waihona i wehe ʻole ʻia mai Windows RAM (Task Manager -> Create dump file) ma mua o ka laka paʻa¶

Inā ʻike ʻoe ua poina ʻoe i kāu ʻōlelo huna (a i ʻole e holoi i kāu waihona kī KeePass i ka wā e wehe ʻia ana ka waihona ʻikepili ** i kēia manawa a wehe ʻia ma kāu pale i kēia manawa ), ** MAI laka i ka waihona a pani i ka puka makani. 1. ʻOiai i ka manawa KeePassXC, Bitwarden, a i ʻole 1Password pono ʻoe e kākau hou i kāu ʻōlelo huna e kaomi i ka Export Vault pihi, nā mea i hoʻopaʻa ʻia a i ʻole ka 256-bit i loaʻa MasterKey ke noho nei i ka hoʻomanaʻo kaʻina hana (RAM) i ka wā e wehe ʻia ai ka puka aniani. 2. ʻO ka mea mua, e kaomi i kāu mau inoa inoa kiʻekiʻe loa ma ka ʻaoʻao (leka uila, ka waihona kālā, nā waihona kapuaʻi, ke kākau inoa domain) a kope iā lākou i loko o kahi faila i hoʻopili ʻia a kiʻi paha iā lākou. 3. No ka mea KeePass / KeePassXC: ʻOiai e wehe ʻia ana ka waihona, inā poina ʻoe i ka ʻōlelo huna a i ʻole ka holoi ʻana i ka faila kī, e nānā inā File -> Export -> CSV hana ** me ka ʻole o ** koi ʻana no ka ʻōlelo huna (ma nā mana he nui o KeePassXC, ʻaʻole pono ke hoʻokomo hou ʻana i ke kī hoʻohui ʻia ka lawe ʻana i kahi waihona i wehe ʻia i CSV a i ʻole HTML.

Nīnau pinepine¶

Hiki iā 1Password a i ʻole Bitwarden kākoʻo mea kūʻai aku ke wehe i kaʻu waihona inā hoʻouna au iā lākou i kaʻu passport aupuni a me ka ID notarized?¶

ʻAʻole, he mea hiki ʻole ke makemakika. Hoʻohana ʻo 1Password a me Bitwarden i ka hopena i ka hopena hoʻopunipuni ʻaoʻao o ka mea kūʻai aku ʻike ʻole. ʻO kāu ʻōlelo huna (a me 1Password's 34-character A3- Secret Key) mai haʻalele i kāu kelepona a ʻaʻole loa e hoʻouna ʻia i kā lākou mau kikowaena. ʻOiai inā ua hoʻopiʻi ka ʻaha iā AgileBits a i ʻole Bitwarden, a i ʻole ʻoe i hōʻike i kahi passport notarized ma ke keʻena nui, paʻa wale kā lākou mau kikowaena i kahi blob ciphertext i hoʻopili ʻia (AES-256) ʻaʻole hiki ke wehe ʻia me ka ʻole o nā kī i mālama ʻia ma kāu mau polokalamu ponoʻī.

No ke aha e wehe ai i ka Wi-Fi (Airplane Mode) iaʻu e wehe iā Bitwarden me kaʻu ʻole 2FA code?¶

Ma ka hoʻolālā palekana o Bitwarden, Komo ʻelua ʻAkahi (2FA) he hōʻoia hōʻoia i hoʻokō ʻia e ka Bitwarden cloud server i ka wā e hoʻoiho ai i kāu blob vault i hoʻopili ʻia ma ka pūnaewele; ʻo ia ʻaʻole hoʻohana ʻia ma ke ʻano o ke kī cryptographic e hoʻopili ai i ka vault iā ia iho. I ka manawa i komo ai ka mea hana i hoʻokahi manawa, hoʻopaʻa ʻo Bitwarden i hoʻopili i ka waihona i loko data.json (a i ʻole browser LevelDB) i pale ʻia e kāu ʻŌlelo huna. Ke mālama ʻoe i ke kamepiula a i ʻole kelepona i loko Ke ano o ka mokulele, wehe ka app i ke kope huna kūloko me ka hoʻohana wale ʻana i kāu ʻōlelo huna Master a hiki iā ʻoe ke hoʻokuʻu aku i kāu mau ʻōlelo huna a pau i kahi .json a i ʻole .csv waihona.

He aha inā inā poina iaʻu i kaʻu ʻōlelo huna, ʻaʻohe oʻu pahu pilikia, a ʻo kaʻu manawa wehe wale nō ma kaʻu iPhone me ka ID Face?¶

Inā wehe mau kāu iPhone a i ʻole iPad i kāu ʻōlelo huna ma o Face ID a i ʻole Touch ID, e mālama i kēlā kelepona e like me nā lako hoʻolei pahū: E hoʻopaʻa ʻia i loko o kahi loina, e hoʻokomo iā ia i ka Airplane Mode, a mai hoʻokuʻu i ka make a hoʻomaka hou i ke kelepona.. Inā hoʻomaka hou ke kelepona, a inā hāʻule ka Face ID i 3 a 5 mau manawa i ka lālani, hoʻopau ka app i ke kī decryption biometric mai ka Secure Enclave session a koi iā ʻoe e kākau i kāu ʻōlelo huna Master poina. E hoʻomaopopo i ka lawe ʻana i kahi waihona ma o Nā hoʻonohonoho -> Export ʻO ka mea maʻamau e koi i ke kākau ʻana i ka ʻōlelo huna kumu ʻoiai ke wehe ʻia ma o Face ID; no laila, mai hoʻāʻo e hoʻohana i ka papa kuhikuhi nui Export. Akā, wehe me ka Face ID a e wehe me ka lima i kēlā me kēia helu helu koʻikoʻi, e kaomi i ke kiʻi maka e hōʻike i ka ʻōlelo huna, a kiʻi a kākau paha i kēlā me kēia ʻōlelo huna ma ka pepa..

Pehea wau e pale ai i ka laka ʻana o ka ʻōlelo huna i ka wā e hoʻihoʻi hou ai au i kaʻu waihona?¶

Ma hope koke o ka hoʻihoʻi ʻana i kāu vault, e hoʻokō i ka 3-Layer Physical + Offline Backup Rula: (1) E paʻi i ʻelua kope pepa kino o kāu 1Password Emergency Kit (a i ʻole kāu ʻōlelo huna Bitwarden Master + 2FA Code Ho'ōla) a e mālama i hoʻokahi i loko o ka hale pale ahi a hoʻokahi i loko o ka pahu waihona palekana a i ʻole me kekahi lālā o ka ʻohana hilinaʻi; (2) E hoʻokuʻu aku i kahi kope i hoʻopili ʻia o kāu waihona (.kdbx a i ʻole ʻo Bitwarden i pale ʻia me ka ʻōlelo huna .json) ma luna o ʻelua pahu uila USB pahemo i kēlā me kēia 90 lā; a (3) Inā hoʻohana ʻoe 1 ʻOhana ʻōlelo huna a i ʻole Nā ʻohana / ʻoihana ʻo Bitwarden, e hoʻokaʻawale i ka hoa hilinaʻi a i ʻole ka moʻokāki hoʻokele ʻelua i ke kuleana **Account Recovery**, kahi e paʻa ai ke kī escrow hiki ke hoʻonohonoho hou i ka ʻōlelo huna kumu poina o kahi lālā o ka ʻohana.

Nā alakaʻi pili¶

• Hoʻopaʻa ʻia ka luna ʻōlelo huna, nalowale ka ʻōlelo huna a me ka hoʻihoʻi ʻana i ka waihona
• Ua nalowale ʻo TOTP app Authenticator i ka wā o ka hoʻonui ʻana i ke kelepona a i ʻole ka haki ʻana o ka pale
• ʻO ka laka MFA a me ka hoʻihoʻi ʻana i ka mea hōʻoia
• Nalo ka mea paani Passkey a me WebAuthn: nā kī kī i hoʻopaʻa ʻia me ka lako lako
• ʻO VeraCrypt, BitLocker, a i ʻole Cryptomator i hōʻino i ke poʻo poʻomanaʻo
• Nā helu pilikia ma ka ʻāina

Nā kumu a me ke alakaʻi kūhelu¶

• 1Password Official Security Pepa Keʻokeʻo a me nā palapala kākoʻo (support.apple.com / support.1password.com/secret-key-security/ & support.1password.com/find-secret-key/): * ʻElua-Pūnae Key Derivation (2SKD), A3- Ka Waihona Ki Huna ma nā Mea Mana Mana, a me nā Kaʻina Hana Hoʻihoʻi Kiko Kūʻē Kūʻē *.
• Bitwarden Official Security & Cryptographic Pepa Keʻokeʻo (bitwarden.com/help/bitwarden-security-white-paper/ & bitwarden.com/help/storage-locations/): Kumu Hua'ōlelo Hua'ōlelo Nui (PBKDF2-SHA256 / Argon2id), Kūloko data.json Nā wahi hoʻopahemo hoʻopahemo, a me ʻelua-Step Login Recovery.
• KeePass / KeePassXC Official Documentation (keepass.info/help/base/keys.html & keepass.info/help/base/repair.html): Ka Hoʻolālā Kiʻi Kiʻi Composite, .keyx XML Keyfile Specification, a me KDBX 4.x Repair Mode Import.
• ʻO GurpreetKang Open-Source Forensic Tool (github.com/GurpreetKang/BitwardenDecrypt): Wehewehe pahemo o ka Bitwarden i hoʻopaʻa ʻia data.json Nā faila Vault me ​​ka hoʻohana ʻana i nā ʻōlelo huna kumu i ʻike ʻia.