Kukangama ya Vault ya Gestionnaire de mot de passe: Nsabi ya kinsweki ya 1Mot de passe yina me vilaka, Code ya kuvutula ya Bitwarden 2FA, to Fichier ya nsabi ya KeePass (Kubasisa Balukutakanu ya Vault ya Kisika yina Bo Me Bumbaka)¶

Kukangama na mfumu ya mot de passe (1Password, Bitwarden, KeePassXC, Proton Pass, to LastPass) na nima ya kubeba ya carte mère ya ordinatere ya maboko, ya kuvutula telefone na kisika na yo, ya kufwa profil ya navigateur, to ya kuvidisa ordinatere na nge na kintulumukina . 1Password Nsabi ya Kinsweki ya bisono 34 (A3-XXXXXX-...), Bitwarden Kode ya Kuvutula Kukota na Bitambi Zole, to . KeePass .keyx keyfile kele mpasi ya ngolo ya identité numérique. Bamfumu ya bilumbu yai ya ke zabaka ve ata kima mosi ke kangaka kisika na nge ya kubumba bima na apareyi na nge na kusadilaka . AES-256-GCM to ChaCha20-Poly1305 me katuka na nzila PBKDF2-HMAC-SHA256 to Argon2id na ntwala nde ata byte mosi kusimba dituti. Sambu muntu yina ke pesaka nge bima ke vandaka ve ata fioti ti Mot de passe ya ntete, Nsabi ya Kinsweki, to fichier ya nsabi ya bwala na beno, lusadisu ya bakiliya na AgileBits (1Password) to Bitwarden lenda vutula mot de passe na nge ve to kukatula ve na kisika yina nge ke bumbaka bima na baserveur na bo ata nki mutindu.

Kansi, kukangama ya kukota na matuti ketendula ve ata fyoti nde ba mot de passe na nge memana kimakulu. Na ntangu yonso yina ata apareyi mosi ya nge me kotaka ntete (telefone ya ntama, tablette ya zole, ordinatere ya kisalu, profil ya navigateur ya kisalu, kopi ya apareyi ya iCloud to ya Google Drive, to Windows . Volume Shadow Copy / macOS Time Machine disque snapshot) kele kaka ti bansangu ya bo me bumbaka na kisika yina bo ke bumbaka bansangu (1Password.sqlite, Kitini ya fioti data.json, to .kdbx réplica) mpe nge zaba kaka Mot de passe ya mfumu na nge (to nge kele na biométrique Touch ID / Face ID / Windows Hello configuré sur ce appareil secondaire), nge lenda kangula cache yina ya kisika yina nge kele ve na Internet na Mode Avion mpi kubasisa 100 na kati ya nkama ya ba mot de passe na nge na ntwala nde serveur ya matuti kukatula kidimbu ya session. Sambu na mambu ya urgence ya ke tadila mambu yai, tala . mfumu ya mot de passe lockout mpi kuvutula mot de passe mfumu, TOTP ya appli authentificateur me vila na ntangu ya kutula telefone na zulu to ya kupasula ecran, mpidina Kukangama ya MFA mpi kuvutula ya muntu yina ke ndimaka. Kana lockout na nge ke tadila nswalu luzingu to mpasi ya kimunganga, binga nimero ya urgence ya bwala na beno (911 na États-Unis mpi na Canada, . 112 na Union européenne ya mvimba, . 999 na Royaume-Uni) to tala mukanda na beto ya . nimero ya urgence.

Sala yo sesepi¶

1. Tula KONSO ordinatere, telefone, mpi tablette ya zole yina me kotaka ntete ve na ngidika ya ba mot de passe na kati ya . Airplane Mode (katula Wi-Fi mpi katula Ethernet) NA NTUALA ya kutedimisa ecran to kukangula appli:
2. Sambu na nki isolation ya réseau kele kima ya ntete ya nge fwete sala: Kana bo katulaka nswa ya kusala session ya konti na nge, bo vutulaka token na nge ya 2FA, to abonnement na nge manaka, na ntangu yina 1Password to Bitwarden app na ordinatere na nge ya zole to na telefone na nge ya ntama ke vukanaka ti internet, yo ke yulaka API ya ntama (my.1password.com to identity.bitwarden.com), ke bakaka . HTTP 401 Unauthorized to kidimbu ya kukatula session, mpi ke katulaka na mbala mosi kisika yina bo me bumbaka bima yina kele na nzila ve (data.json / 1Password.sqlite) katuka na diske.
3. Kutanina apareyi 100 na kati ya nkama na nganda ya nzila ke pusaka application ya ordinatere, application ya telefone, to extension ya navigateur na kuvutuka na Mode ya kukangula cache na nzila ya Internet, yina ke pesa nge nzila ya kukangula kisika ya kubumba bima na kusadilaka kaka Mot de passe Maître (to biométrique) na nge kukonda kulomba code 2FA to kusimba maboko ya mpa ya Clé Secrète.
4. Kufina ve ata fioti "Log Out", "Remove Account", "Clear Browser Data", to "Reinstall App" na apareyi yina bo me kanga: Kubasika na extension ya navigateur Bitwarden to na application ya ordinatere 1Password ke katulaka mbala mosi mambu yina bo me bumbaka na kisika yina . Secret Key property and encrypted vault blob. Leave the locked app untouched and copy its underlying application data folder to a safe backup folder first.
5. Understand which of the three lockout components you are missing:
6. Missing 1Password 34-Character Secret Key (A3-...) (while still knowing your Master Password): The Secret Key is stored in plaintext inside the local configuration database of every device where you ever signed in, inside your downloaded 1Password Emergency Kit.pdf, inside Apple Keychain (iCloud Keychain) on Mac/iOS, or inside any old device backup.
7. Missing Bitwarden 2FA Authenticator / Recovery Code (while still knowing your Master Password): Because Bitwarden's 2FA only gates server authentication (not local vault encryption), any device that already has a cached data.json vault file on disk can be unlocked offline using just your Master Password, or decrypted using open-source offline Bitwarden vault extractors (bitwarden-decrypt).
8. Missing KeePass / KeePassXC Keyfile (.key / .keyx) (while still knowing your Master Password): The keyfile is hashed via SHA-256 into the composite master key; you must recover the exact byte-for-byte file from disk sectors, Volume Shadow Copies, cloud trash, or browser/OS recent-file caches.
9. Before opening any offline vault on a secondary device, clone its local vault directory to an external USB drive: On Windows, macOS, or Linux, copy the entire %LocalAppData%\1Password, %AppData%\Bitwarden, or browser Local Extension Settings folder to a separate folder so that even if the app misfires and wipes its cache, you still have a pristine copy of the encrypted SQLite/JSON database.
10. If your only remaining logged-in device is a phone or laptop with a biometric unlock (Face ID, Touch ID, Windows Hello) and you forgot the Master Password itself: Do not reboot that device (rebooting clears the biometric key handle in RAM and forces a Master Password prompt on first unlock). Unlock the app via Face ID to Touch ID while in Airplane Mode, open the highest-priority credentials, and manually view or copy every password immediately.
11. Search every computer, email attachment, Downloads folder, and cloud drive for "Emergency Kit" to "bitwarden_recovery_code" right now: When 1Password first created your account, it forced a browser download of a file named 1Password Emergency Kit.pdf (or saved a Passkey/Secret Key entry into Apple Keychain Access). Run a system-wide search before assuming the key is gone.

Decision tree: password manager lockout triage and offline vault extraction¶

Follow this forensic recovery workflow based on which password manager and authentication factor you lost:

flowchart TD
    Start["Locked Out of Password Manager Vault (1Password, Bitwarden, KeePassXC, Proton Pass)"] --> IsolateNow["STEP 1: Put All Secondary Laptops, Phones, & Tablets into AIRPLANE MODE Immediately (Before Opening the App or Browser)"]

    IsolateNow --> WhichApp{"Which Password Manager & Credential Factor Is Missing?"}

    WhichApp -->|"1Password: Lost 34-Char Secret Key (A3-XXXXXX...), Still Know Master Password"| OnePassCheck{"Do You Have ANY Device Still Signed In (Or a Mac/iPhone Backup)?"}

    OnePassCheck -->|"YES: Logged-in App on Old Phone, Tablet, or PC"| Extract1PKey["Open Offline App -> Tap Account Icon -> 'Set Up Another Device' or 'View Secret Key' to Reveal Full A3-... Key (OR Extract from 1Password.sqlite / Apple Keychain)"]

    OnePassCheck -->|"NO: Only Have Time Machine, Windows Shadow Copy, or Downloads Folder"| Search1PKit["Search Disk & Backups for '1Password Emergency Kit.pdf', '1Password.sqlite', or 'opvault' / 'b5.sqlite'"]

    WhichApp -->|"Bitwarden: Lost 2FA TOTP App & 2FA Recovery Code, Still Know Master Password"| BitwardenCheck{"Is Bitwarden Desktop or Browser Extension Still Logged In on ANY Device (Offline)?"}

    BitwardenCheck -->|"YES: Cached Vault Exists on Disk"| UnlockBWOffline["Lunda Apareyi na Mode ya Avion -> Kangula App/Extension ya Bitwarden ya Kisika na beno ti Mot de Passe ya Mfumu -> Basisa Vault na .json / .csv -> Na nima Vutula Konti mpi Kotisa Diaka"]

    BitwardenCheck -->|"NO: Extension me kangama to me basika, kansi 'data.json' kele na Disque/Sauvegarde"| DecryptBWJson["Kopia 'data.json' ya kisika yina na AppData to na LevelDB ya Navigateur -> Sala 'bitwarden-decrypt' ya kukonda nzila na kusadilaka mot de passe na nge ya mfumu"]

    WhichApp -->|"Lunda / LundaXC: Mukanda ya nsabi ya me vilaka (.keyx/.nsabi) to .kdbx ya me beba"| KeePassRescue["1. Tala KeePassXC '.kdbx.tmp' & Lusansu lwa Nsekola za Matuti. 2. Sosa Disque sambu na Fichier ya mfunu na nzila ya ‘Mambu yonso’ / Photorec to Kopi ya Kivudi ya Volime ya Windows (vssadmin)"]

    WhichApp -->|"Kuvila Mot de passe ya mfumu yo mosi (Kuvanda kaka ti Deverrouillage biométrique actif na telefone/ordinatere ya maboko)"| BiometricRescue["KUTUBA VE APARAI: Bikala na Mode ya Avion -> Kangula Vault na nzila ya ID ya Luse / ID ya Kusimba / Mbote ya Windows -> Kopie Bamot de Passe na Maboko"]

Kitini 1: Kuvutula kima yina me vilaka 1Password Nsabi ya kinsweki (A3-XXXXXX-...) mpi kisika ya kubumba bima yina kele ve na nzila¶

1Password (ba version 7 mpi 8) ke sadilaka Derivation ya Nsabi Zole ya Kinsweki (2SKD) architecture: nsabi ya kubumba bansangu na nge (MPK) ke katukaka na matematike na kuvukisaka Mot de passe ya ntete na nge (na nzila ya PBKDF2-HMAC-SHA256) ti Nsabi ya Kinsweki ya 128-bit yina bo me sala na mutindu ya kukonda kukana yina bo me yidika bonso nsinga ya bisono 34 yina ke yantika na ** .A3-** (Mu mbandu, A3-ABCDEF-GHIJKL-MNOPQR-STUVWX-YZ1234-567890). Kukonda yina A3- Nsabi ya Kinsweki, kuzaba Mot de passe na nge ya Mfumu mpamba mefwana ve na matematike sambu na kukatula bansangu na baserveur ya 1Password.

Kansi, Nsabi ya Kinsweki kele VE kinsweki na ba apareyi na nge mosi: konso apareyi yina me kotaka dezia na konti na nge ya 1Password ke bumbaka bansangu na nge yonso . A3- Secret Key na disque dur na yo ya kisika yina nge ke bumbaka bima sambu nge sonika ve bisono 34 konso suka.

Metode 1: Kusonga mambu na nge . A3- Nsabi ya kinsweki ya konso telefone, tablete, to ordinatere yina nge me kota¶

Tala konso smartphone, iPad, ordinatere ya kisalu, to navigateur ya ordinatere kisika nge me sadilaka ntete ve 1Mot de passe (tula ntete apareyi na Mode Avion): 1. Na 1Password 8 sambu na iOS / Android: - Kangula appli 1Mot de passe -> niema Icon ya Conte / Profil na nge na zulu na diboko ya kimama -> niema Set Up Another Device (to Manage Accounts -> [Your Account] -> Set Up Another Device). - Robinet View Account Details na nsi ya code QR: nge ya mvimba A3-... Nsabi ya Kinsweki ke monanaka na masonama ya mpamba-mpamba kaka na zulu ya ecran. Sonika yo na papie mbala mosi. 2. Na 1Password 8 sambu na macOS / Windows / Linux: - Kangula 1Mot de passe -> niema Zina ya konti na nge na barre ya zulu na diboko ya kimama -> pona Set Up Another Device... -> niema secret key and sign-in address sambu na kumonisa mambu ya sikisiki A3-... nsinga. 3. Na kati ya 1Password Vault na nge mosi: - Konso konti ya 1Password ke basisaka na mbala mosi kima mosi ya bo me tungaka na kati ya nkumbu ya 1Password Account (login) na kati ya kisika na nge ya kubumba bima ya Personnel / Privé na kilumbu ya ntete. Kana nge lenda kangula 1Password na nganda ya nzila na konso apareyi, sosa na kisika na nge ya kubumba bima 1Password Account; yo kele ti Mot de passe ya ntete mpi Nsabi ya kinsweki na nge.

Metode ya zole: Kubasisa kima mosi ya me vilaka . 1Password Nsabi ya kinsweki ya Apple iCloud Keychain to macOS Keychain Access¶

Kana nge me kota dezia 1Password na iPhone, iPad, to Mac na kusadilaka Safari to application ya kisina, systeme d’exploitation ya Apple ke pesaka na mbala mosi nzila ya kubumba bansangu na nge ya kukota na 1Password to . Account Key na kati Porte-clés / Ba mot de passe ya Apple: 1. Na macOS Sonoma / Sequoia (macOS 14 / 15+) to iOS 17/18: - Kangula appli Bamot de passe (to System Settings -> Passwords) ye ziula ye ID ya Touch yovo ID ya Luse. - Sosa 1password.com to 1Password Account Key. - Tala zina ya muntu, mot de passe, to matonsi yina bo me bumba: Safari mpi 1Password sambu na iOS ke bumbaka mbala mingi mambu yonso . A3-XXXXXX-... Nsabi ya kinsweki na kati ya nsangu ya bo me bumba sambu na . my.1password.com. 2. Na macOS Keychain Access (local items / iCloud): - Kufina Cmd + Space, mutindu Keychain Access, ye sosa 1Password, agilebits, to A3-. - Fina mbala zole na konso kima yina ke wakana application password kota mpi tala Show password.

Metode ya 3: Kubasisa . A3- Nsabi ya kinsweki to kisika ya kubumba bima na diske (1Password.sqlite & Emergency Kit.pdf)¶

Ata kana application ya ordinatere 1Password ta kanguka ve to ordinatere na nge lenda yantika ve (bo me tula yo bonso disque dur ya zole to bo me vutula yo katuka na ordinatere mosi . Time Machine / File History / Backblaze backup), tala bisika yai ya sikisiki ya disque dur:

Kitini ya 2: Kubeluka na nima ya . Bitwarden Kukangama ya 2FA (data.json Kukatula na nzila ya cache mpi kukatula yo)¶

Kana nge me vidisa application na nge ya Authentificateur TOTP, bima na nge YubiKey, mpi Code de récupération de l’entrée à deux étapes de Bitwarden, baserveur ya matuti ya Bitwarden (vault.bitwarden.com) ta buya nde nge kota na konso navigateur to telefone ya mpa. Kansi, mutindu Bitwarden me salaka mambu ya kubumbana ke pesa nge mambote ya mfunu ya kugulusa bantu: 2FA ya Bitwarden ke ndimisaka nge kaka na API ya web; yo kele VE kitini ya nsabi ya kubumba (masterKey / encKey) ya bo ke sadilaka sambu na kukanga fichier ya kisika yina nge ke bumbaka bima (data.json).

Yo ke tendula nde kana nge me zaba kaka Mot de passe Maître ya Bitwarden, mpi nge kele ti konso ordinatere, telefone, to kopi ya bo me bumbaka yina kele ti kopi ya bo me bumbaka ya kisika ya Bitwarden . data.json to IndexedDB / LevelDB storage banda ntangu nge kotaka, nge lenda katula 100 na kati ya nkama ya ba mot de passe yina nge kele ve na Internet.

Metode 1: Kukangula application to extension ya Bitwarden yina kele kaka na kati na . Airplane Mode¶

1. Katula ordinatere to telefone na internet na mvimba na yo (fwa Wi-Fi, katula Ethernet, tula Mode Avion na telefone ya maboko).
2. Kangula Application ya ordinatere ya Bitwarden, Application ya ordinatere (Chrome, Brave, Edge, Firefox), to Application ya ordinatere.
3. Na ntangu yonso yina appli vandaka na "Kukangama" (kulomba Mot de passe ya ntete to PIN/Biometrie) na kisika ya kulomba "Kubasika" (kulomba Adresi na nge ya Email), kusonika Mot de passe ya ntete na nge ntangu nge kele ve na nzila ya Internet ke kangulaka mbala mosi kisika ya kubumba bima ya kisika yina nge ke bumbaka bima kukonda kulomba 2FA.
4. Nswalu kwenda na ** .Settings -> Vault options -> Export vault** (to File -> Export Vault na ordinatere), pona .json (JSON ya kukonda kukangama, yo yina yo ke tindaka bisika ya nge me yidika, ba URI, bankeni ya TOTP, mpi ba structure ya ba dossier), sonika Mot de passe ya ntete, mpi bumba . .json fichier na disque dur USB to na conteneur ya VeraCrypt.
5. Kana nge me zikisa nde nge me tinda .json fichier kele na ba logins na nge yonso na editeur ya masonama, nge lenda kwenda na vault.bitwarden.com/#/recover-delete (to vault.bitwarden.eu/#/recover-delete), katula konti ya matuti yina bo me kangaka na 2FA, sala konti ya mpa ya Bitwarden ti e-mail yina mosi, mpi niema ** .Tools -> Import Data -> Bitwarden (json)** sambu na kuvutula kisika na nge ya kubumba bima ya mvimba na basegonde 30.

Metode ya 2: Kukatula mambu ya Bitwarden . data.json to Navigateur LevelDB mbala mosi na diske (bitwarden-decrypt)¶

Inki beto lenda tuba kana appli ya ordinatere to extension ya navigateur ya Bitwarden ta kangula ve na UI, to disque dur ya ordinatere na nge me tulamaka na zulu ya backup, to nge kele kaka ti dossier ya ba données ya application brut?

1. Sosa Bitwarden ya bwala na beno data.json to kisika ya kubumba bima ya navigateur na disque (sala kopi ya dossier na ntwala ya kusimba yo):

1. Zikisa nde charge ya coffre encrypté kele kaka na kati data.json:
2. Kangula kopi na nge data.json fichier na kati ya editeur ya masonama (Notepad to VS Code).
3. Sosa bansinga "ciphers_ ye "encKey" (to "masterKeyEncryptedUserKey" na Bitwarden ya mpa stateVersion ba skema).
4. Kana nge mona bankama ya bandonga ya . "2.iv|ciphertext|mac" bansinga na nsi ciphers_<userId>, konso mot de passe, ba note, na ba nkeni ya TOTP na nge me vanda kaka na kati ya fichier yina, ya kukangama kaka na Mot de passe Maître na nge.
5. Kukangula data.json Kusadila na nganda ya internet bitwarden-decrypt (Kisalu ya Python ya Kukangula):
6. Na konso ordinatere yina kele ti Python 3, baka nzila ya kukangula yina bo me tadilaka bitwarden-decrypt bangogo (github.com/GurpreetKang/BitwardenDecrypt) yina ke sadilaka mambu ya siki-siki ya Bitwarden . PBKDF2-SHA256 / Argon2id + . HKDF-Expand + . AES-256-CBC-HMAC-SHA256 hiérarchie ya nsabi na kisika na beno:

   pip install cryptography argon2-cffi
   python3 BitwardenDecrypt.py data.json --output recovered_vault.json
   

7. Sonika Mot de passe ya mfumu ya Bitwarden kana bo me lomba nge. Script ke katuka na nge . masterKey katuka na e-mail na nge mpi na Mot de passe ya ntete, ke katulaka . encKey (masterKeyEncryptedUserKey), mpi ke basisaka mukanda mosi ya bunkete yina bantu lenda tanga . recovered_vault.json yina kele ti konso nzila ya kukota, mot de passe, nkeni ya TOTP, mpi noti ya lutaninu.

Kitini ya 3: Kubeluka na nima ya . KeePass to KeePassXC Kuvidisa fichier ya mfunu to .kdbx mayuya¶

Na kuswaswana ti bamfumu yina ke yambaka bantu na matuti, KeePass 2.x mpi KeePassXC bumba kisika na nge ya kubumba bima .kdbx dosie (KDBX 4.x format) ya kukangama na kusadilaka Nsabi ya Mfumu ya Kuvukisa. Kana nge me yidika bansangu na nge sambu yo lomba Mot de passe ya ntete mpi Fichier ya mfunu (.key to .keyx), KeePass ke vukisaka mambu ya siki-siki ya kele na kati ya fichier ya nsabi ti . SHA-256 mpi ke vukisaka hash yina ya 32-byte ti hash ya mot de passe na ntwala ya kusala . Argon2d/Argon2id.

1. Mutindu ya kuzwa kima yina bo me tula ve na kisika ya mbote to yina bo me katula . .key / .keyx Fichier ya nsabi (to kifwanisu/mukanda yina bo ke sadilaka bonso fichier ya nsabi)¶

Sambu kuvidisa fichier ya nsabi kele kiteso mosi ti kuvidisa nsapi ya cryptographique ya 256 bits, nge lenda sala ve brute-force na fichier ya nsabi ya kukonda kukana; nge fwete zwa kopi ya fichier ya me fwanana ti byte: 1. tala KeePassXC.ini / KeePass.config.xml sambu na kumona zina ya fichier ya nsuka ya bo me sadila mpi nzila ya fichier ya mfunu: - Mbala mingi bantu yina ke sadilaka yo ke vilaka nki fichier na ordinatere na bo bo ponaka bonso fichier na bo ya mfunu (bantu mingi ke ponaka fichier mosi ya mpamba-mpamba . .jpg foto, .pdf mukanda, to fichier mosi ya kele ti zina ya kukonda kuzabana na disque dur USB). - Kangula fichier ya configuration ya kisika na nge na editeur ya masonama: - LundaXC (Windows): %AppData%\KeePassXC\keepassxc.ini (to %LocalAppData%\KeePassXC\keepassxc.ini) -> tala na nsi [LastDatabases] to LastKeyFiles. - LundaXC (macOS / Linux): /Users/<Username>/Library/Application Support/KeePassXC/keepassxc.ini to /home/<Username>/.config/keepassxc/keepassxc.ini. - Lunda 2.x (Windows): %AppData%\KeePass\KeePass.config.xml -> sosa <KeyFilePath>. - Knowing the exact filename and folder path (E:\Keys\my_secret_pic.jpg) ke songa nge nki stick USB, karte SD to dossier ya matuti nge fwete sosa. 2. Kuzenga kima mosi ya bo me katula .keyx Fichier ya mfunu XML ya me katuka na kisika ya bo me kabula ve na basegonde 60: - Nsiku KeePass / KeePassXC ba fichiers ya mfunu ya bo me basisa (.keyx to .key Format XML) kele fioti (< 1 KB ba fichiers) yina ke yantika na ntu-diambu ya XML ya kuswaswana:

<?xml version="1.0" encoding="utf-8"?>
<KeyFile>
    <Meta>
        <Version>1.00</Version>

2. Kuyidika kima mosi ya me beba . .kdbx bansangu ya bansangu (Invalid signature to HMACHashMismatch after power loss or cloud sync)¶

Kana nge .kdbx kulosa fichier Not a KeePass database to Corrupted database / HMAC mismatch na nima ya kufwa ya ordinatere to mavwanga ya Google Drive / OneDrive: 1. Sosa mambu ya kubumbana .kdbx.tmp to .kdbx.bak atomic-write sibling files: - By default, KeePassXC ke sadilaka Safe Save (Atomic Write): yo ke sonikaka bansoba na fichier ya ntangu fioti na kati ya dossier mosi ntete, na nima yo ke pesaka yo zina ya nkaka na zulu ya fichier ya kisina . .kdbx. Look in the same directory (with hidden files enabled) for any .tmp, .bak, or conflict copy (Passwords (Conflicted copy).kdbx). 2. Vutula version ya mazono na Histoire ya version ya Cloud to Copie ya kivudi ya Windows: - Kana nge .kdbx ke vandaka na kati ya Dropbox, Google Drive, OneDrive, to iCloud Drive, kota na porte ya Internet ya matuti na navigateur na nge, niema na diboko ya kitata na . .kdbx fichier, mpe pona Version History sambu na kubaka nsoba ya bunkete ya ntama yina katukaka na ntwala ya kubeba. 3. Sala KeePass 2.x ya bo me tungaka na kati Repair Mode Kukotisa na bwala: - Kangula KeePass 2.x ya officiel na Windows -> sala bansangu ya mpa ya mpamba -> niema File -> Import... -> select KeePass KDBX (2.x) (Repair Mode) -> point it at your corrupted .kdbx fichier mpi sonika Mot de passe na nge ya Mfumu. Mode ya kuyidika ketulaka ve dikebi na bafoot ya HMAC ya stream ya kubeba mpi kegulusaka konso bloque ya kukota yina bo lenda tanga tii na offset ya byte ya kubeba.

Phase 4: Extracting cached vaults from iOS, Android, and macOS backups (iMazing, Time Machine, mpidina DPAPI memory dumps)¶

What if your primary phone was lost, stolen, or factory reset, and your laptop was already wiped or logged out, leaving you with zero active live sessions? You can still extract the offline password manager vault from an iPhone local backup, macOS Time Machine snapshot, or Windows hibernation / crash dump file.

1. Extracting 1Password to Bitwarden SQLite/JSON vaults from an iPhone or iPad backup (iMazing / idevicebackup2)¶

Whenever you back up an iPhone or iPad to a Mac or Windows PC (especially an Encrypted Local Backup in Finder or iTunes), the backup archive captures the application sandbox containers of 1Password mpi Bitwarden: 1. Do NOT restore the backup onto a live internet-connected phone first: If you restore the backup onto a phone that connects to Wi-Fi during Setup Assistant, the restored app will immediately ping the cloud server and wipe its expired token. 2. Use iMazing to iBackup Viewer on an offline computer to browse the raw backup filesystem: - Open your local iPhone backup inside iMazing (File System -> Apps -> 1Password to Bitwarden). - For 1Password: Go to AppDomainGroup-group.com.agilebits.onepassword-ios/Library/Application Support/1Password/Data/ and extract 1Password.sqlite (to B5.sqlite). Inside the accounts table of that SQLite file sits your plaintext A3-XXXXXX-... Nsabi ya Kinsweki. - For Bitwarden: Go to AppDomainGroup-group.com.8bit.bitwarden/Library/Preferences/ and extract group.com.8bit.bitwarden.plist. Convert the binary .plist to XML (plutil -convert xml1 group.com.8bit.bitwarden.plist) and open it in a text editor: it contains the exact same ciphers_<userId> mpi masterKeyEncryptedUserKey Ba ntungulu ya JSON ke sadilamaka na BitwardenDecrypt.py, yina ke sadisa nge na kukatula konso mot de passe yina kele ve na Internet na kusadilaka Mot de passe na nge ya Ntete.

2. Kubasisa Proton Pass, Dashlane, mpidina LastPass cache ya navigateur ya kele ve na nzila¶

Kana lockout na nge ke tadila . Proton Pass, Dashlane, to LastPass: - Proton Pass Mode ya kukonda nzila mpi Cache ya Extension ya Navigateur: Proton Pass ke bumbaka foto ya kisika yina bo me sonikaka na ndinga ya ngolo na kati ya Chromium IndexedDB (chrome-extension_<id>_0.indexeddb.leveldb). Kana nge tula ordinatere na nge ya maboko na Mode Avion, nge kangula navigateur, mpi nge kangula Proton Pass ti mot de passe to PIN na nge, nge lenda kota na kisika yina nge ke bumbaka bima yina kele ve na nzila mpi kubasisa to kutala bansangu na nge na ntwala ya kuvutuka na réseau. - LastPass Cache ya kisika yina kele na nzila ve (lpall.slp / acct.slp: Na fenetre (%LocalAppData%\LastPass to %AppData%\LocalLow\LastPass) mpi macOS (/Users/<Username>/Library/Application Support/LastPass), LastPass ke bumbaka kima mosi . AES-256 fichier cache XML/SQLite ya kisika yina bo me sonikaka na zina ya hash ya email na nge. Kukatula Wi-Fi mpi kukota na extension ya navigateur LastPass ti Mot de passe Maître na nge ke lutaka ba authentificateur multifacteur ya kubeba mpi ke kangulaka mbala mosi kisika ya kubumba bima yina kele na nzila ve.

3. Kulosa kisika ya kubumba bima yina bo me kangaka ve na RAM ya Windows (Task Manager -> Create dump file) na ntwala ya kukangisa na kingolo-ngolo .¶

Kana nge me bakisa nde nge me vila Mot de passe Maître (to nge me katula fichier ya nsabi ya KeePass ntangu base de données kele kukangula mpi kukangula ntangu yai na écran na nge sesepi yai), KANGA VE base de données to kukanga ve fenetre. 1. Ata ntangu KeePassXC, Bitwarden, to 1Password yo ke lomba nde nge sonika diaka Mot de passe ya ntete sambu na kubula . Export Vault buto, ba entrées ya coffre décrypté to yina me katuka na 256-bit . MasterKey kele ntangu yai na memoire ya processus (RAM) ekolo fenetre ya fulu kia lundilwa lekwa yaziuka. 2. Ntete, niema na nzila ya ba logins na nge ya kuluta mfunu na écran (e-mail, banki, bakonti na matuti, registraire ya domaine) mpi kotisa yo na fichier ya masonama ya bo me sonikaka to baka bafoto na yo. 3. Sambu na KeePass / KeePassXC: Ntangu base de données kele kaka ya kukangula, kana nge me vila Mot de passe Maître to nge me katula fichier ya nsabi, tala kana ** .File -> Export -> CSV** ke salaka kukonda kulomba Mot de passe ya ntete (na ba version mingi ya KeePassXC, kutinda bansangu yina bo me kangulaka dezia na CSV to na HTML ke lombaka ve kukotisa diaka nsabi ya bo me vukisa).

Bangyufula yina bantu keyulaka mbala na mbala¶

Keti 1Password to lusadisu ya bakiliya ya Bitwarden lenda kangula kisika na mono ya kubumba bima kana mono tinda bo passeport na mono ya luyalu mpi ID yina bo me sonikaka na notere?¶

Ve, yo kele mpasi na matematike. 1Mot de passe mpi Bitwarden ke sadilaka nsuka-nsuka . zero-nzayilu ya kubumbana na ndambu ya klien. Mot de passe ya ntete (mpi 1Password ya kele ti bisono 34 A3- Secret Key) ke basikaka ve ata fioti na apareyi na nge mpi bo ke tindaka yo ve ata fioti na baserveur na bo. Ata kana tribinale bingaka AgileBits to Bitwarden, to nge monisaka passeport yina bo me sonikaka na notere na biro na bo ya nene, baserveur na bo ke vandaka kaka ti kima mosi ya bo me sonikaka na ndinga ya kubumbana (AES-256) yina lenda katuka ve kukonda bansapi yina bo me bumbaka na ba apareyi na nge mosi.

Sambu na nki kukatula Wi-Fi (Mode d’avion) ​​ke sadisaka mono na kukangula Bitwarden kukonda kode na mono ya 2FA yina me vilaka?¶

Na nsiku ya lutaninu ya Bitwarden, . Kukota na Bitambi Zole (2FA) kele nsiku ya kuzikisa kana nge kele muntu ya kieleka yina serveur ya matuti ya Bitwarden ke lombaka ntangu nge ke bakaka blob na nge ya coffre encrypté na nzila ya internet; yo kele ve bo ke sadilaka yo bonso kitini ya nsabi ya kubumba yina ke bumbaka kisika yina bo ke bumbaka bima. Kana apareyi mosi me kota mbala mosi, Bitwarden ke bumbaka kisika yina bo me bumbaka bansangu na kati . bansangu.json (to LevelDB ya navigateur) yina bo me tanina na . Mot de passe ya ntete. When you keep the computer or phone in Mode ya avion, the app unlocks the local cached copy using only your Master Password and lets you export all your passwords to a .json to .csv file.

What if I forgot my Master Password, I have no Emergency Kit, and my only open session is on my iPhone with Face ID?¶

If your iPhone or iPad still unlocks your password manager via Face ID or Touch ID, treat that phone like bomb-disposal hardware: keep it plugged into a charger, put it in Airplane Mode, and DO NOT let the battery die or reboot the phone. If the phone reboots, or if Face ID fails 3 to 5 times in a row, the app flushes the biometric decryption key from the Secure Enclave session and forces you to type your forgotten Master Password. Note that exporting a vault via Settings -> Export usually requires typing the Master Password even when unlocked via Face ID; therefore, do not try to use the bulk Export menu. Instead, unlock with Face ID and manually open each critical account entry one by one, tap the eye icon to reveal the password, and photograph or write down each password on paper.

How do I prevent a password manager lockout from ever happening again once I recover my vault?¶

Immediately after recovering your vault, implement the 3-Layer Physical + Offline Backup Rule: (1) Print two physical paper copies of your 1Password Emergency Kit (or your Bitwarden Master Password + 2FA Recovery Code) and store one in a fireproof home safe and one in a bank safe deposit box or with a trusted family member; (2) Export an encrypted backup of your vault (.kdbx or password-protected Bitwarden .json) onto two offline USB flash drives every 90 days; and (3) If you use 1Password Families to Bitwarden Families / Enterprise, assign a trusted partner or second admin account to the **Account Recovery** role, which holds an escrow key capable of resetting a family member's forgotten Master Password or lost Secret Key.

Bantwadisi ya ke wakana¶

• Password manager lockout, master password loss, and vault recovery
• Authenticator app TOTP lost during phone upgrade or screen shatter
• Kukangama ya MFA mpi kuvutula ya muntu yina ke ndimaka
• Passkey and WebAuthn device loss: synced vs. hardware-bound passkeys
• VeraCrypt, BitLocker, or Cryptomator corrupted volume header recovery
• Ba nimero ya urgence na insi

Bisika mpi lutwadisu ya leta¶

• 1Password Official Security White Paper & Support Documentation (support.apple.com / support.1password.com/secret-key-security/ & support.1password.com/find-secret-key/): Two-Secret Key Derivation (2SKD), A3- Secret Key Storage on Authorized Devices, and Emergency Kit Recovery Procedures.
• Bitwarden Official Security & Cryptographic White Paper (bitwarden.com/help/bitwarden-security-white-paper/ & bitwarden.com/help/storage-locations/): Master Password Key Derivation (PBKDF2-SHA256 / Argon2id), Local data.json Bisika ya Kubumba Bima yina kele na Internet ve, mpi Kuvutula Bisika ya Kukota na Bitini Zole.
• Kutanina / KutaninaXC Mikanda ya Leta (keepass.info/help/base/keys.html & keepass.info/help/base/repair.html): Architecture ya Nsabi ya Mfumu ya Kuvukisa, .keyx XML Nsikudukusu ya Fichier ya Nsabi, mpe KDBX 4.x Mode ya Kuyidika Import.
• GurpreetKang Kisadilu ya Kulonguka Mambu ya Lufwa (github.com/GurpreetKang/BitwardenDecrypt): Kukatula ndinga ya Bitwarden yina bo me bumbaka na nzila ya Internet data.json Bafichier ya Vault Kusadila Bamot de Passe ya Mfumu ya Mezabana.