Ijambobanga ry'umucungerezi w'ububiko: Urufunguzo rw'ibanga rwa 1Password rwatakaye, Kode yo gusubiza Bitwarden 2FA, canke dosiye y'urufunguzo rwa KeePass (Gukuraho ibiganiro vy'ububiko bw'ibanga vyo mu karere)¶

Gukingirwa hanze y'umucungerezi w'ijambobanga ryawe (1Password, Bitwarden, KeePassXC, Proton Pass, canke LastPass) inyuma y’aho motherboard ya laptop ipfuye, telefone isubirijwe mu ruganda, guhanagura urutonde rwa mucukumbuzi, canke gutakaza mu mpanuka 1Password Urufunguzo rw'ibanga rw'inyuguti 34 (A3-XXXXXX-...), Bitwarden Intambwe zibiri zo kwinjira mu nzira yo gusubirana, canke KeePass .keyx keyfile ni ingorane ikomeye y'akaranga ka digitale. Abacungezi b'ijambobanga batagira ubumenyi bo muri iki gihe bapfuka ububiko bwawe mu karere ku gikoresho cawe bakoresheje AES-256-GCM canke ChaCha20-Poly1305 vyavuye mu PBKDF2-HMAC-SHA256 canke Argon2id imbere y’uko byte imwe ikora ku gicu. Kubera ko uwuguha amakuru atigera agira Ijambobanga ryawe ry’Ibanze, Urufunguzo rw’Ibanga, canke dosiye y’urufunguzo rwo mu karere, ubufasha bw’abaguzi kuri AgileBits (1Password) canke Bitwarden ntibashobora gusubiramwo ijambobanga ryawe canke gukuraho ububiko bwawe ku ma server yabo uko vyogenda kwose.

Ariko rero, gufunga kwinjira mu gicu hafi ntibisigura ko amajambo y’ibanga yawe yaheze ubuziraherezo. Igihe cose mbere n’igikoresho kimwe cari carashizwemwo (telefone ya kera, tablette ya kabiri, laptop yo ku kazi, urutonde rw’umucukumbuzi wo ku kazi, ububiko bw’igikoresho ca iCloud canke Google Drive, canke Windows . Volume Shadow Copy / OS Time Machine disk snapshot) iracari n'ububiko bw'amakuru bubitswe mu karere (1Password.sqlite, Bitwarden data.json, canke .kdbx replica) kandi uracari uzi Ijambobanga ryawe ry'umukuru (canke ufise biometric Touch ID / Face ID / Windows Hello configured kuri ico gikoresho ca kabiri), urashobora gufungura iyo cache yo mu karere itari mu murongo mu buryo bw’indege maze ugarungika hanze 100 kw’ijana vy’amajambo y’ibanga yawe imbere y’uko umukozi wo mu gicu akuraho ikimenyetso c’ikiganiro. Ku bibazo vyihutirwa bijanye n’ivyemezo, raba ijambobanga ry'umuyobozi gufunga no gusubiza ijambobanga ry'umukuru, Porogaramu y'ukwemeza TOTP yatakaye mu gihe co kuvugurura telefone canke gusenyuka kw'igicapo, na MFA gufunga no gusubirana kw'uwushingira intahe. Niba ugufunga kwawe birimwo ingorane z’ubuzima canke z’ubuvuzi, hamagara inomero y’ivyihutirwa yo mu karere kawe (911 muri Leta Zunze Ubumwe za Amerika no muri Kanada, 112 mu bihugu vyose vy’Ubumwe bw’Uburaya, 999 mu Bwongereza) canke urabe ububiko bwacu bw’ inomero z'ivyihutirwa.

Ivyo ubikore ubu¶

1. Shira mudasobwa, telefone, na tablette YOSE ya kabiri yigeze gushika ku mucungerezi w'ijambobanga ryawe muri Airplane Mode (kuraho Wi-Fi hanyuma ukureho Ethernet) IMBERE yo gukangura igicapo canke gufungura app:
2. Kubera iki kwitandukanya n’urubuga ari co kintu ca mbere ukora: Nimba igihe ca konti yawe cakuweho uburenganzira, ikimenyetso cawe ca 2FA carasubiwemwo, canke kwiyandikisha kwawe kwaheze, igihe 1Password canke Bitwarden app iri kuri laptop yawe ya kabiri canke kuri telefone yawe ya kera ihuriye kuri interineti, irarondera API iri kure (my.1password.com canke identity.bitwarden.com), aronka . HTTP 401 Unauthorized canke ikimenyetso co gukuraho ikiganiro, na bisukura ubwo nyene ububiko bw'ibintu bubitswe mu karere (data.json / 1Password.sqlite) kuva kuri disiki.
3. Gutuma igikoresho kiguma 100 kw’ijana kitari ku murongo bituma porogarama yo kuri biro, porogarama yo kuri telefone ngendanwa, canke porogarama yo mu mucukumbuzi isubira ku Offline Cache Unlock Mode, bikagufasha gufungura ububiko ukoresheje ijambobanga ryawe ry’ingenzi gusa (canke biometrics) udakeneye kode ya 2FA canke gufata ukuboko gushasha kw’urufunguzo rw’ibanga.
4. Ntukigere ukanda "Log Out", "Remove Account", "Clear Browser Data", canke "Reinstall App" ku gikoresho gipfungiwe: Gusohoka mu nzira y'umucukumbuzi wa Bitwarden canke muri porogarama y'ibiro 1Password bica bikuraho ibibitswe aho hantu Secret Key umutungo na blob y'ububiko bw'ibintu. Siga porogaramu yugarijwe itakozweko maze ukope dosiye y’amakuru y’iporogarama iri munsi yayo mu dosiye y’ububiko butekanye.
5. Tahura mu bice bitatu vy'ugufunga ubuze:
6. Ibibuze 1Password 34-Urufunguzo rw'ibanga rw'inyuguti (A3-...) (mu gihe ukiri uzi Ijambobanga ryawe ry'Ibanze): Urufunguzo rw'Ibanga rubitswe mu nyandiko rusangi imbere mu rutonde rw'amakuru y'imiterere y'aho hantu rw'igikoresho cose wigeze kwinjira, imbere mu vyo waronse 1Password Emergency Kit.pdf, imbere mu rufunguzo rwa Apple (iCloud Keychain) kuri Mac/iOS, canke imbere mu gikoresho cose ca kera co gucungera.
7. Ibibuze Bitwarden 2FA Authenticator / Recovery Code (mu gihe ukiri uzi Ijambobanga ryawe ry'Ibanze): Kubera ko 2FA ya Bitwarden irembo gusa kwemeza server (si ugushiramwo amakuru y'ububiko bwo mu karere), igikoresho cose gisanzwe gifise ububiko data.json dosiye y'ububiko kuri disiki ishobora gufungurwa ata murongo ukoresheje Ijambobanga ryawe ry'Ibanze, canke igafungurwa ukoresheje inkomoko yuguruye itari mu murongo Bitwarden vault extractors (bitwarden-decrypt).
8. Ibibuze KeePass / KeePassXC Dosiye y'urufunguzo (.key / .keyx) (mu gihe ukiri uzi Ijambobanga ryawe ry'Ibanze): Dosiye y'urufunguzo irahashwa biciye ku SHA-256 mu rufunguzo rw’umukuru rwuzuye; ugomba kugarura dosiye nyayo ya byte-ku-byte kuva ku mice ya disiki, Volume Shadow Copies, igicu c'umwanda, canke umucukumbuzi/OS ububiko bwa dosiye za vuba.
9. Imbere yo gufungura ububiko bwose butari ku murongo ku gikoresho ca kabiri, kopa ububiko bwabwo bwo mu karere ku gikoresho co hanze ca USB: Kuri Windows, macOS, canke Linux, kopira ububiko bwose %LocalAppData%\1Password, %AppData%\Bitwarden, canke umucukumbuzi Local Extension Settings dosiye mu dosiye itandukanye kugira ngo naho porogaramu yoba ikora nabi kandi igahanagura ububiko bwayo, uzoba ufise kopi y'ububiko bw'amakuru bwa SQLite/JSON.
10. Nimba igikoresho cawe conyene gisigaye co kwinjira ari telefone canke laptop ifise ubuhinga bwo gufungura (Face ID, Touch ID, Windows Hello) kandi wibagiwe Ijambobanga ry'Ibanze ubwaryo: Ntu subire gufungura ico gikoresho (gusubira gufungura bikuraho urufunguzo rwa biometric muri RAM kandi bikaba bihatira Ijambobanga ry'Ibanze ku gufungura ubwa mbere). Gufungura porogaramu biciye kuri Face ID canke Touch ID igihe uri mu Murongo w’Indege, fungura ivyemezo vy’agaciro kuruta ibindi vyose, hanyuma ubone canke ukope ijambobanga ryose ubwo nyene.
11. Rondera muri mudasobwa yose, imeyili yose, ububiko bw'ivyo ushobora gukuraho, n'umuvuduko w'igicu "Emergency Kit" canke "bitwarden_recovery_code" ubu nyene: Ni ryari 1Password mbere yaremye konti yawe, yahagaritse umucukumbuzi gukuraho dosiye yitwa 1Password Emergency Kit.pdf (canke wabitse urufunguzo rw'ibanga/urufunguzo rw'ibanga muri Apple Keychain Access). Gukoresha ubushakashatsi muri sisitemu yose imbere yo kwiyumvira ko urufunguzo rwaheze.

Igiti c'ingingo: umucungerezi w'ijambobanga ryo gufunga no gukuraho ububiko butari kuri interineti¶

Kurikiza iyi nzira yo gusubizaho ivy'amategeko bishingiye ku mucungerezi w'ijambobanga n'ikintu co kwemeza ko ari we watakaje:

flowchart TD
    Start["Ifunguwe hanze y'Ijambobanga ry'Umucungerezi (Ijambobanga 1, Bitwarden, KeePassXC, Ijambobanga rya Proton)"] --> IsolateNow["INTAMBWE YA 1: Shira Laptops, Telefone, & Tablets Zose Zibiri Mu BURYO BW’INDEGE Ubwo nyene (Imbere yo Gufungura App canke Browser)"]

    IsolateNow --> WhichApp{"Ni irihe Mucungerezi w'Ijambobanga & Ikintu c'Ivyemezo Kibuze?"}

    WhichApp -->|"1Ijambobanga: Urufunguzo rw'ibanga rw'inyuguti 34 rwatakaye (A3-XXXXXX...), Uracari uzi ijambobanga ry'umukuru"| OnePassCheck{"Woba Ufise Igikoresho COSE Ukishizemwo (Canke Mac/iPhone Backup)?"}

    OnePassCheck -->|"EGO: Porogarama yinjiye kuri telefone ya kera, kuri tablette canke kuri PC"| Extract1PKey["Gufungura Porogaramu itari ku murongo -> Kanda ku kimenyetso ca konti -> 'Shiraho ikindi gikoresho' canke 'Raba urufunguzo rw'ibanga' kugira ngo uhishure urufunguzo rwose rwa A3-... (CANKE Kuva muri 1Password.sqlite / Apple Keychain)"]

    OnePassCheck -->|"OYA: Ufise gusa imashini y'igihe, kopi y'igitutu ca Windows, canke dosiye y'ivyo ushobora gukuraho"| Search1PKit["Gushakisha Disiki n'Ibibiko '1Ijambobanga ry'Ivyihutirwa Kit.pdf', '1Ijambobanga.sqlite', canke 'opvault' / 'b5.sqlite'"]

    WhichApp -->|"Bitwarden: Yatakaye 2FA TOTP App & 2FA Gusubirana Kode, Uracari uzi Ijambobanga ry'Umukuru"| BitwardenCheck{"Mbega Bitwarden Desktop canke Browser Extension iracari ku gikoresho ico ari co cose (Itari ku rubuga)?"}

    BitwardenCheck -->|"EGO: Ububiko Bubitswe Buhari kuri Disiki"| UnlockBWOffline["Gumana igikoresho mu buryo bw'indege -> Gufungura Porogaramu/Ivyagutse vya Bitwarden vyo mu karere n'ijambobanga ry'umukuru -> Gusohora Vault muri .json / .csv -> Hanyuma Subiramwo Konti & Wongere Uyinjize"]

    BitwardenCheck -->|"OYA: Ukwaguka Kwafunze canke Kwasohotse, Ariko 'data.json' Iriho kuri Disiki/Ibikoko"| DecryptBWJson["Kopa 'data.json' yo mu karere kuva kuri AppData canke Umucukumbuzi LevelDB -> Gukoresha 'bitwarden-decrypt' inyandiko ya Python ukoresheje ijambobanga ryawe"]

    WhichApp -->|"Gukomeza / Gukomeza XC: Dosiye y'urufunguzo yatakaye (.urufunguzo/.urufunguzo) canke Yononekaye .kdbx"| KeePassRescue["1. Suzuma KeePassXC '.kdbx.tmp' & Amateka y'Igicu. 2. Rondera kuri Disk dosiye y'ingenzi biciye ku 'Ibintu vyose' / Photorec canke Kopi y'Igitutu c'Ijwi rya Windows (vssadmin)"]

    WhichApp -->|"Ijambobanga ry'umukuru ryibagiwe ubwaryo (Uracari n'ugufungura Biometric kuri telefone/laptop)"| BiometricRescue["NTUSUBIRE GUTANGA IGIKORESHO: Gumana mu buryo bw'indege -> Gufungura Vault biciye ku ID yo mu maso / ID yo gukorako / Windows Ndabaramukije -> Kopa amajambobanga n'amaboko"]

Icigwa ca 1: Gusubiza ivyo watakaje 1Password Urufunguzo rw'ibanga (A3-XXXXXX-...) n'ububiko butari ku murongo¶

1Password (imirongo 7 na 8) ikoresha Ibanga ribiri ry'urufunguzo (2SKD) ubwubatsi: urufunguzo rwawe rwo gupfuka (MPK) biva mu mibare mu gufatanya Ijambobanga ryawe ry'Ibanze (biciye PBKDF2-HMAC-SHA256) n'urufunguzo rw'ibanga 128-bit rwavutse mu buryo butari bwo rwateguwe nk'urudodo rw'inyuguti 34 rutangura na A3- (nk'akarorero, A3-ABCDEF-GHIJKL-MNOPQR-STUVWX-YZ1234-567890). Atavyo A3- Urufunguzo rw’ibanga, kumenya ijambobanga ryawe ry’umukuru gusa ntibihagije mu mibare kugira ngo ushobore gukuraho amakuru ava ku ma server ya 1Password.

Ariko rero, Urufunguzo rw’Ibanga NTIRURI ibanga ry’ibikoresho vyawe bwite: igikoresho cose carigeze kwinjira muri konti yawe ya 1Password kibika amakuru yawe yose A3- Urufunguzo rw’ibanga kuri drive yayo y’ububiko kugira ngo ntubwirizwe kwandika inyuguti 34 buri gitondo.

Uburyo bwa 1: Guhishura ivyawe A3- Urufunguzo rw'ibanga ruvuye kuri telefone yose yinjiye, kuri tablette, canke kuri mudasobwa¶

Suzuma telefone yose, iPad, laptop yo ku kazi, canke umucukumbuzi wo ku biro aho wigeze ukoresha 1Password (banza ushire igikoresho mu Airplane Mode): 1. Ku 1Password 8 kuri iOS / Android: - Gufungura porogaramu ya 1Password -> ukore kuri Igishushanyo ca konti yawe / Umwirondoro wawe mu mfuruka yo hejuru ibubamfu -> ukore kuri Set Up Another Device (canke Manage Accounts -> [Your Account] -> Set Up Another Device). - Kanda View Account Details munsi ya kode ya QR: vyose vyawe A3-... Urufunguzo rw'ibanga rugaragara mu nyandiko rusangi nyene ku mugaragaro. Ubwo nyene uvyandike ku mpapuro. 2. Ku 1Password 8 kuri macOS/Idirisha/Linux: - Gufungura 1Ijambobanga -> kanda Izina rya konti yawe mu ruhande rwo hejuru ibubamfu -> uhitemwo Set Up Another Device... -> kanda secret key and sign-in address kugaragaza nyavyo A3-... umugozi. 3. Imbere mu 1Ijambobanga ryawe ubwaryo: - Buri konti ya 1Password ihita itanga ikintu cubatswemwo citwa 1Password Account (login) imbere mu Bubiko bwawe bw'umuntu ku giti ciwe / bw'umuntu ku giti ciwe ku musi wa mbere. Niba ushobora gufungura 1Password offline ku gikoresho ico ari co cose, rondera mu bubiko bwawe 1Password Account; irimwo Ijambobanga ryawe ry'Umukuru n'Urufunguzo rwawe rw'Ibanga**.

Uburyo bwa 2: Gukuraho ikintu cazimiye 1Password Urufunguzo rw'ibanga rwa Apple iCloud Keychain canke macOS Keychain Access¶

Niba wigeze kwinjira muri 1Password kuri iPhone, iPad, canke Mac ukoresheje Safari canke porogarama y’akavukire, ubuhinga bwa Apple buratanga ubwo nyene kubika amakuru yawe yo kwinjira 1Password canke . Account Key imbere Urufunguzo rwa Apple / Amajambobanga: 1. Ku macOS Sonoma / Sekuyoya (macOS 14 / 15+) canke iOS 17/18: - Gufungura Ijambobanga porogaramu (canke System Settings -> Passwords) hanyuma ufungure ukoresheje Touch ID canke Face ID. - Rondera kuri 1password.com canke 1Password Account Key. - Suzuma izina ry'ukoresha, ijambobanga, canke umwanya w'amajambo yabitswe: Safari na 1Password ya iOS kenshi zibika vyose A3-XXXXXX-... Urufunguzo rw'ibanga ruri mu rwego rw'ivyemezo rwabitswe my.1password.com. 2. Muri macOS Keychain Access (local items / iCloud: - Gucapura Cmd + Space, ubwoko Keychain Access, hanyuma urondere 1Password, agilebits, canke A3-. - Fyonda kabiri kuri vyose bihuye application password kwinjira no gusuzuma Show password.

Uburyo bwa 3: Gukuraho A3- Urufunguzo rw'ibanga canke ububiko bubitswe kuri disiki (1Password.sqlite & Emergency Kit.pdf)¶

Naho porogarama ya 1Password yoba itazofunguka canke mudasobwa yawe idashobora gufunguka (ishizweho nk’umuduga wa kabiri canke igasubirwamwo ivuye kuri Time Machine / File History / Backblaze backup), suzuma ibi bibanza nyavyo vya disiki:

Icigwa ca 2: Gukira indwara Bitwarden 2FA gufunga (data.json Gukuraho ububiko butari mu murongo no gufungura)¶

Niwaba watakaje porogarama yawe y’Ivyemezo vya TOTP, ibikoresho YubiKey, na Kode yawe yo Gusubira Kwinjira mu Ntambwe Zibiri za Bitwarden, abakozi ba Bitwarden bo mu gicu (vault.bitwarden.com) izokwanka ko winjira mu mucukumbuzi canke telefone nshasha iyo ari yo yose. Ariko rero, ubuhinga bwa Bitwarden bwo gukora amakuru y’ibanga buraguha akamaro gakomeye ko gukiza: 2FA ya Bitwarden irakwemeza gusa kuri API y’urubuga; NTIRI igice c'urufunguzo rwo gupfuka (masterKey / encKey) ikoreshwa mu gupfuka dosiye yawe y'ububiko (data.json).

Ivyo bisigura ko nimba ukiri uzi Ijambobanga ryawe rya Bitwarden, kandi ufise mudasobwa iyo ari yo yose, telefone, canke ububiko burimwo kopi y’ibanga rya Bitwarden ryo mu karere . data.json canke IndexedDB / LevelDB ububiko kuva igihe winjiye, urashobora gukuraho amajambo y’ibanga yawe 100 kw’ijana utari kuri interineti.

Uburyo bwa 1: Gufungura porogarama ya Bitwarden canke iyo porogarama ikiri mu Airplane Mode¶

1. Kura mudasobwa canke telefone kuri internet burundu (zima Wi-Fi, ukure Ethernet, ufungure Airplane Mode kuri telefone ngendanwa).
2. Gufungura Iporogaramu yo ku biro ya Bitwarden, Igikoresho co gukoresha mu mucukumbuzi (Chrome, Brave, Edge, Firefox), canke Iporogaramu yo kuri telefone ngendanwa.
3. Igihe cose app yari mu "Locked" (isaba ijambobanga ryawe ry'ingenzi canke PIN/Biometrics) aho gusaba "Logged Out" (isaba Aderesi yawe ya Email), kwandika ijambobanga ryawe ry'ingenzi mu gihe utari ku murongo bifungura ububiko bw'ibintu vy'imbere mu gihugu ubwo nyene ataco usaba 2FA.
4. Ubwo nyene genda kuri Settings -> Vault options -> Export vault (canke File -> Export Vault ku biro), hitamwo .json (JSON itabitswe, rero yohereza hanze ivyicaro vy'abantu, URIs, imbuto za TOTP, n'imiterere y'amadosiye), winjize Ijambobanga ryawe ry'Ibanze, hanyuma ubike .json dosiye ku muvuduko wa USB canke mu gikoresho ca VeraCrypt.
5. Umaze kugenzura ko ivyo wohereje hanze .json dosiye irimwo ivyinjira vyawe vyose mu muhinduzi w'inyandiko, ushobora kuja kuri vault.bitwarden.com/#/recover-delete (canke vault.bitwarden.eu/#/recover-delete), gukuraho konti y'igicu yugarijwe na 2FA, ureme konti nshasha ya Bitwarden ifise iyo imeyili nyene, hanyuma ukande Tools -> Import Data -> Bitwarden (json) kugira ngo ugarure ububiko bwawe bwose mu masegonda 30.

Uburyo bwa 2: Gukuraho amakuru ya Bitwarden data.json canke Umucukumbuzi LevelDB bivuye kuri disiki (bitwarden-decrypt)¶

Bimeze gute nimba porogarama ya Bitwarden canke iyo nzira y’umucukumbuzi itazofungura muri UI, canke umuvuduko wa mudasobwa yawe ushizweko uvuye ku nzira y’ububiko, canke ufise gusa dosiye y’amakuru y’ibikorwa bitagiramwo ivyatsi?

1. Tora Bitwarden wo mu karere kawe data.json canke ububiko bw'ivyagutse vy'umucukumbuzi kuri disiki (kora kopi y'ububiko bwa dosiye imbere yo kuyikorako):

1. Suzuma ko umuzigo w'ububiko bwashizwemwo amakuru ukiri imbere data.json:
2. Gufungura ivyo wakopiye data.json dosiye mu muhinduzi w'inyandiko (Notepad canke VS Code).
3. Rondera imirongo "ciphers_ na "encKey" (canke "masterKeyEncryptedUserKey" mu Bitwarden nshasha stateVersion ibishushanyo).
4. Niwabona amajana y’imirongo ya . "2.iv|ciphertext|mac" imirongo iri musi ciphers_<userId>, ijambobanga ryawe ryose, amajambo, n'imbuto za TOTP zicaye muri iyo dosiye, zipfutse n'Ijambobanga ryawe ry'Ishengero gusa.
5. Gukuraho data.json ukoresheje bitwarden-decrypt (Igikoresho ca Python c'inkomoko yuguruye):
6. Kuri mudasobwa yose ifise Python 3, fungura inkomoko yuguruye yagenzuwe bitwarden-decrypt inyandiko (github.com/GurpreetKang/BitwardenDecrypt) ishira mu ngiro nyavyo Bitwarden PBKDF2-SHA256 / Argon2id + . HKDF-Expand + . AES-256-CBC-HMAC-SHA256 urufunguzo rw'uburongozi mu karere:

   pip install cryptography argon2-cffi
   python3 BitwardenDecrypt.py data.json --output recovered_vault.json
   

7. Injira Ijambobanga ryawe rya Bitwarden iyo usabwe. Inyandiko ikomoka ku vyawe masterKey kuva kuri imeyili yawe n'ijambobanga ryawe, bikuraho encKey (masterKeyEncryptedUserKey), kandi igasohora igitabu gisukuye kandi gishobora gusomwa n’abantu . recovered_vault.json irimwo ukwinjira kwose, ijambobanga, imbuto ya TOTP, n'inyandiko itekanye.

Icigwa ca 3: Gukira indwara KeePass canke KeePassXC Gutakaza dosiye y'urufunguzo canke .kdbx ibiturire¶

Udakunze abarongozi bakiriwe mu gicu, KeePass 2.x na KeePassXC kubika ububiko bwawe mu buryo bwigenga .kdbx dosiye (KDBX 4.x format) ipfutse hakoreshejwe Urufunguzo rw'Igihugu. Niwaba watunganije urutonde rwawe rw'amakuru kugira ngo rusabe Ijambobanga ry'Ibanze n'Idosiye y'Urufunguzo (.key canke .keyx), KeePass ihindura ibirimwo nyavyo muri dosiye y'urufunguzo na SHA-256 kandi ugafatanya iyo hash y'amabayiti 32 n'ijambobanga ryawe mbere yo gukoresha Argon2d/Argon2id.

1. Uko woronka ikintu kitashizwe ahantu hatabereye canke gisubiwemwo . .key / .keyx Dosiye y'urufunguzo (canke ishusho/inyandiko ikoreshwa nk'idosiye y'urufunguzo)¶

Kubera ko gutakaza dosiye y’urufunguzo bingana no gutakaza urufunguzo rw’ibanga rw’ibice 256, ntushobora gukoresha brute-force dosiye y’urufunguzo y’imburakimazi ibuze; ugomba kurondera kopi isa na byte ya dosiye: 1. Gusuzuma KeePassXC.ini / KeePass.config.xml kugira ngo ubone izina rya dosiye n'inzira ya dosiye y'urufunguzo: - Akenshi abakoresha baribagirwa dosiye iri kuri mudasobwa yabo bahisemwo ngo ibe dosiye yabo y'urufunguzo (abakoresha benshi bahitamwo dosiye y'imburakimazi .jpg ifoto, .pdf inyandiko, canke dosiye ifise izina ry’agahomerabunwa iri ku muduga wa USB). - Gufungura dosiye yawe y'imiterere mu muhinduzi w'inyandiko: - GukomezaIcapaXC (Windows: %AppData%\KeePassXC\keepassxc.ini (canke %LocalAppData%\KeePassXC\keepassxc.ini) -> raba munsi [LastDatabases] canke LastKeyFiles. - GukomezaIcapaXC (macOS / Linux: /Users/<Username>/Library/Application Support/KeePassXC/keepassxc.ini canke /home/<Username>/.config/keepassxc/keepassxc.ini. - Gukomeza 2.x (Windows: %AppData%\KeePass\KeePass.config.xml -> gushakisha <KeyFilePath>. - Kumenya izina nyaryo rya dosiye n'inzira ya dosiye (E:\Keys\my_secret_pic.jpg) ikubwira urudodo rwa USB, ikarata SD canke dosiye yo mu gicu ushobora kurondera. 2. Baza ivyasibwe .keyx Dosiye y'urufunguzo ya XML kuva ku mwanya utagenewe kuri disiki mu masegonda 60: - Ivyagezwe KeePass / KeePassXC dosiye z'urufunguzo zavutse (.keyx canke .key Uburyo bwa XML) ni buto (< 1 KB dosiye) zitangura n'umutwe udasanzwe wa XML:

<?xml version="1.0" encoding="utf-8"?>
<KeyFile>
    <Meta>
        <Version>1.00</Version>

2. Gukosora ikintu cononekaye .kdbx urutonde rw'amakuru (Invalid signature canke HMACHashMismatch inyuma y'ugutakaza ubushobozi canke gukorana n'igicu)¶

Nimba ivyawe .kdbx dosiye ijugunya Not a KeePass database canke Corrupted database / HMAC mismatch inyuma y'aho mudasobwa igwiriye canke amakimbirane yo guhuza umuduga wa Google / OneDrive: 1. Rondera ivyihishijwe .kdbx.tmp canke .kdbx.bak atomic-kwandika amadosiye y'abavukanyi: - Ku mburabuzi, KeePassXC ikoresha Safe Save (Atomic Write): yandika amahinduka kuri dosiye y'igihe gito muri dosiye imwe mbere, hanyuma ikayihindura izina ku y'umwimerere .kdbx. Raba muri ubwo bubiko nyene (bufise amadosiye yihishije) ku kintu cose .tmp, .bak, canke kopi y'amatati (Passwords (Conflicted copy).kdbx). 2. Subizaho verisiyo y'ejo kuva mu mateka ya verisiyo y'igicu canke kopi y'igitutu ca Windows: - Nimba ivyawe .kdbx yicara imbere muri Dropbox, Google Drive, OneDrive, canke iCloud Drive, winjire mu rubuga rw'urubuga rw'igicu mu mucukumbuzi wawe, ukande iburyo kuri .kdbx dosiye, hanyuma uhitemwo Version History kugira ngo ushireko isubiramwo ry’isuku ry’imbere ry’imbere y’ibiturire. 3. Gukoresha KeePass 2.x Yubatswemwo Repair Mode Kwinjiza mu gihugu: - Gufungura KeePass 2.x kuri Windows -> ureme urutonde rw'amakuru rushasha -> kanda File -> Import... -> hitamwo KeePass KDBX (2.x) (Repair Mode) -> uyigaragaze ku vyononekaye vyawe .kdbx dosiye maze winjize Ijambobanga ryawe ry'Ishengero. Uburyo bwo gusanura bwirengagiza ibirenge vya HMAC vyavunitse kandi bugakiza igice cose c'injira gishobora gusomwa gushika ku nzira ya byte yononekaye.

Icigwa ca 4: Gukura ububiko bw'ibintu mu bubiko bwa iOS, Android, na macOS (iMazing, Time Machine, na DPAPI ububiko bw'ububiko)¶

Bimeze gute iyo telefone yawe ya mbere yatakaye, yibwe canke igasubirwamwo nk’uko yari imeze mu ruganda, kandi laptop yawe ikaba yamaze gukurwaho canke igasohoka, bikagusiga ata n’imwe ikora? Ushobora gukuraho ububiko bw'ijambobanga ry'umucungerezi utari mu murongo mu ububiko bw'iPhone, ifoto y'imashini y'igihe ya macOS, canke dosiye y'ugusinzira / gusenyuka kwa Windows.

1. Gukuraho 1Password canke Bitwarden SQLite/JSON ububiko buva kuri iPhone canke iPad (iMazing / idevicebackup2)¶

Igihe cose ukoresheje ububiko bwa iPhone canke iPad kuri Mac canke Windows PC (na cane cane Ububiko bw’aho hantu bushizwe mu mfuruka muri Finder canke iTunes), ububiko bw’ububiko bufata ibikoresho vy’iporogarama y’isanduku y’umusenyi y’ 1Password na Bitwarden: 1. NTUBANZE usubize backup kuri telefone ihuriye kuri internet: Niwasubiza backup kuri telefone ihuye na Wi-Fi mu gihe ca Setup Assistant, app yasubiwemwo izoca ikora ping kuri server y’igicu maze ikureho ikimenyetso cayo caheze. 2. Koresha iMazing canke iBackup Viewer kuri mudasobwa itari kuri mudasobwa kugira ngo ubone dosiye y'ububiko bw'ibintu: - Gufungura iPhone yawe yo mu karere imbere iMazing (File System -> Apps -> 1Password canke Bitwarden). - Ku bwa 1Password: Genda kuri AppDomainGroup-group.com.agilebits.onepassword-ios/Library/Application Support/1Password/Data/ na gukuraho 1Password.sqlite (canke B5.sqlite). Imbere mu accounts Imbonerahamwe y'iyo dosiye ya SQLite yicaye mu nyandiko yawe A3-XXXXXX-... Urufunguzo rw'Ibanga. - Ku bwa Bitwarden: Genda kuri AppDomainGroup-group.com.8bit.bitwarden/Library/Preferences/ na gukuraho group.com.8bit.bitwarden.plist. Guhindura bibiri .plist kuri XML (plutil -convert xml1 group.com.8bit.bitwarden.plist) hanyuma ukayifungura mu muhinduzi w’inyandiko: irimwo ivyo nyene . ciphers_<userId> na masterKeyEncryptedUserKey Imiterere ya JSON ikoreshwa na BitwardenDecrypt.py, bigufasha gukuraho ijambobanga ryose utari kuri interineti ukoresheje Ijambobanga ryawe ry’Ibanze.

2. Gukuraho Proton Pass, Dashlane, na LastPass Ububiko bwa mucukumbuzi butari kuri interineti¶

Nimba ugufunga kwawe birimwo Proton Pass, Dashlane, canke LastPass: - Proton Pass Uburyo bwo hanze y'umurongo n'Ukwagura Ububiko bw'Umucukumbuzi: Proton Pass ibika ifoto y'aho hantu yashizwemwo amakuru imbere muri Chromium IndexedDB (chrome-extension_<id>_0.indexeddb.leveldb). Iyo ugumije laptop yawe muri Airplane Mode, ugafungura browser, ugafungura Proton Pass ukoresheje ijambobanga ryawe canke PIN, urashobora kwinjira mu nzu yawe y’ububiko bw’ibintu bitari mu nzira maze ukarungika hanze canke ukabona amakuru yawe y’ibanga mbere yo gusubira kwifatanya n’urubuga. - LastPass Ububiko bwo mu karere butari kuri interineti (lpall.slp / acct.slp: Ku madirisha (%LocalAppData%\LastPass canke %AppData%\LocalLow\LastPass) na MacOS (/Users/<Username>/Library/Application Support/LastPass), LastPass ibika AES-256 dosiye y'ububiko bwa XML/SQLite y'aho hantu yitiriwe hash ya imeyili yawe. Guca Wi-Fi no kwinjira mu nzira y’umucukumbuzi wa LastPass n’Ijambobanga ryawe ry’Ibanze bica ku bimenyetso vy’ibintu vyinshi vyavunitse maze bikagurura ububiko bw’ibintu bitari mu nzira.

3. Guta ububiko bukiri bufunguwe muri Windows RAM (Task Manager -> Create dump file) imbere y'ugufunga ku nguvu¶

Niwabona ko wibagiwe Ijambobanga ryawe ry'Ibanze (canke warasivye dosiye yawe y'urufunguzo ya KeePass mu gihe urutonde rw'amakuru ubu rufunguye kandi rufunguye ku rubuga rwawe ubu nyene), NTUFUNGE urutonde rw'amakuru canke ngo ufunge idirisha. 1. N’igihe . KeePassXC, Bitwarden, canke 1Password bisaba ko wongera kwandika ijambobanga ryawe kugira ngo ukande kuri Export Vault buto, ivyinjijwe mu bubiko bwasohowe canke 256-bit MasterKey ubu bariko baricara mu bwibuke bw'ibikorwa (RAM) mu gihe idirisha ry’ububiko ryuguruwe. 2. Ubwa mbere, fyonda ku nzira zawe zo kwinjira zihambaye cane ku rubuga (email, banki, amakonti yo mu gicu, umunyamabanga w’itongo) hanyuma uzikope muri dosiye y’inyandiko yashizwemwo canke uzifotore. 3. Kuko KeePass / KeePassXC: Mu gihe urutonde rw'amakuru rukiri rwuguruwe, niwaba wibagiwe Ijambobanga ry'Ibanze canke wasivye dosiye y'urufunguzo, suzuma nimba File -> Export -> CSV ikora ata isaba Ijambobanga ry'Ishengero (mu mirongo myinshi ya KeePassXC, kwohereza hanze urutonde rw'amakuru rwamaze gufungurwa muri CSV canke HTML ntibisaba gusubira kwinjiza urufunguzo rw'uruhererekane).

Ibibazo bikunda kubazwa¶

1Password canke Bitwarden abafasha abakiriya boshobora gufungura ububiko bwanje iyo mbarungikiye pasiporo yanje ya leta n’indangamuntu yanje yemejwe n’umunyamategeko?¶

Oya, mu biharuro ntibishoboka. Ijambobanga na Bitwarden zompi zikoresha iherezo-ku-iherezo zero-ubumenyi bubiwe ku ruhande rw'umukiriya. Ijambobanga ryawe ry'ingenzi (n'ijambobanga rya 1 ry'inyuguti 34 A3- Secret Key) ntizigera ziva ku gikoresho cawe kandi ntizigera zirungikwa ku ma server yabo. Naho sentare yoba yahamagaye AgileBits canke Bitwarden, canke ukagaragaza pasiporo yemejwe n’umunyamabanga mukuru ku cicaro cabo, abakozi babo bafise gusa igitabu c’amajambo y’ibanga (AES-256) zidashobora gufungurwa ata mfunguruzo zibitswe ku bikoresho vyawe bwite.

Ni kuki guca Wi-Fi (Mode y’indege) bituma nfungura Bitwarden ata code yanje ya 2FA yatakaye?¶

Mu nyubakwa y’umutekano ya Bitwarden, Intambwe zibiri zo kwinjira (2FA) ni igenzura ry'ukwemeza rishirwa mu ngiro na serveri y'igicu ya Bitwarden igihe ukuraho blob yawe y'ububiko bw'ibanga kuri interineti; ni vyo Oya ikoreshwa nk’igice c’urufunguzo rw’ububiko rupfuka ububiko ubwabwo. Igihe igikoresho kimaze kwinjira rimwe, Bitwarden irabika ububiko bwashizwemwo amakuru imbere amakuru.json (canke umucukumbuzi LevelDB) irindwa na Ijambobanga ry'umukuru. Iyo ugumije mudasobwa canke telefone muri . Uburyo bw'indege, iyo porogarama ifungura kopi y’aho hantu ikoresheje Ijambobanga ryawe ry’Ibanze gusa kandi ikagufasha kwohereza amajambobanga yawe yose mu . .json canke .csv dosiye.

None iyo nibagirwa Ijambobanga ryanje ry’Imbere, nta Kit y’Ivyihutirwa mfise, kandi session yanje yonyene yuguruye iri kuri iPhone yanje ifise Face ID?¶

Niba iPhone canke iPad yawe iguma ifungura umucungerezi w'ijambobanga ryawe biciye ku Indangamuntu yo mu maso canke Indangamuntu yo gukorako, ufate iyo telefone nk'ibikoresho vyo gukuraho ibibombe: ugumye uyishize mu charger, uyishire muri Airplane Mode, kandi NTUREKE bateri ipfe canke ngo usubire gufungura telefone .. Iyo telefone isubiye gufungura, canke iyo Face ID inaniwe incuro 3 canke 5 zikurikiranye, iyo porogarama irakura urufunguzo rwo gukuraho amakuru y’ibinyabuzima mu kiganiro ca Secure Enclave maze ikaguhatira kwandika Ijambobanga ryawe ry’Ibanze wibagiwe. Iyumvire ko kwohereza hanze ububiko biciye ku Amagenamiterere -> Gusohora hanze akenshi bisaba kwandika Ijambobanga ry’Umukuru mbere n’igihe ufunguye biciye ku Face ID; rero, ntugerageze gukoresha urutonde rw'ibintu vyinshi. Ahubwo, fungura ukoresheje Face ID na ufungure n’amaboko ikintu cose gihambaye co muri konti kimwe kimwe, ukande ku kimenyetso c’ijisho kugira ngo ubone ijambobanga, hanyuma ufate ifoto canke wandike ijambobanga ryose ku mpapuro ..

Noshobora gute gukingira ijambobanga ry’umucungerezi w’ijambobanga ngo risubire kubaho iyo nsubiye kuronka ububiko bwanje?¶

Ubwo nyene umaze kugarura ububiko bwawe, shira mu ngiro 3-Igice c'umubiri + itegeko ryo gusubiza inyuma: (1) Sohora kopi zibiri z’impapuro z’umubiri z’ibitabu vyawe . 1Ijambobanga ry'Ivyihutirwa (canke ijambobanga ryawe rya Bitwarden + 2FA Kode yo gusubirana) maze ubike imwe mu gisandugu co mu nzu kidashobora guterwa n’umuriro, iyindi na yo uyibike mu gisandugu co muri banki canke ukayibika ku muntu wo mu muryango wizigira; (2) Wohereze hanze ububiko bw'ububiko bwawe (.kdbx canke Bitwarden irindwa n'ijambobanga .json) ku bikoresho bibiri bitagira umurongo vya USB buri misi 90; na (3) Niwakoresha . Ijambobanga ry'imiryango canke Imiryango ya Bitwarden / Ishirahamwe, ushireho umufatanyabikorwa wizigirwa canke konti ya kabiri y’ubuyobozi ku ruhara rwa **Account Recovery**, rufise urufunguzo rwo gusubizaho Ijambobanga ry’Umunyamuryango ry’Ibanga ry’Umunyamuryango ryaribagiwe canke Urufunguzo rw’Ibanga rwazimiye.

Inyobora zifitaniye isano¶

• Ijambobanga ry'umucungerezi ryo gufunga, ijambobanga ry'umukuru ryaratakaye, no kugarura ububiko
• Porogaramu y'ukwemeza TOTP yatakaye mu gihe co kuvugurura telefone canke gusenyuka kw'igicapo
• MFA gufunga no gusubirana kw'uwushingira intahe
• Urufunguzo rw'ibanga n'urufunguzo rwa WebAuthn rwatakaye: urufunguzo rw'ibanga rwahujwe n'urufunguzo rw'ibanga
• VeraCrypt, BitLocker, canke Cryptomator yononekaye umutwe w'ijwi
• Inomero z'ivyihutirwa hakurikijwe igihugu

Amasoko n'ubuyobozi buzwi¶

• 1Ijambobanga ry'umutekano wemewe Igitabo cera n'inyandiko zishigikira (support.apple.com / support.1password.com/secret-key-security/ & support.1password.com/find-secret-key/): Ibanga ribiri ry'urufunguzo (2SKD), A3- Ububiko bw’Ibanga ry’Urufunguzo ku Bikoresho Vyemerewe, n’Uburyo bwo Gusubizaho Ivyihutirwa.
• Bitwarden Umutekano Wemewe & Igitabo Cera c'Ivy'Ibanga (bitwarden.com/help/bitwarden-security-white-paper/ & bitwarden.com/help/storage-locations/): Ijambobanga ry'umukuru ry'urufunguzo (PBKDF2-SHA256 / Argon2id), Ivy'aho hantu data.json Ivyicaro vy’Ububiko Bitari ku Murongo, n’Intambwe Zibiri zo Gusubira Kwinjira.
• Gukomeza / GukomezaXC Inyandiko zemewe (keepass.info/help/base/keys.html & keepass.info/help/base/repair.html): Ubwubatsi bw'Urufunguzo rw'Igihugu, .keyx XML Dosiye y'urufunguzo, na KDBX 4.x Uburyo bwo Gusana Import.
• GurpreetKang Igikoresho co Gutohoza Ivy'Ivyaha (github.com/GurpreetKang/BitwardenDecrypt): Gukuraho amakuru atari mu nzira ya Bitwarden yashizwe mu bubiko data.json Dosiye z'Ububiko Ukoresheje Amajambobanga y'Ishengero Azwi.