Ijambobanga rya Vault Ifunga: Yatakaye 1Ijambo ryibanga Urufunguzo, Bitwarden 2FA Kode yo Kugarura, cyangwa KeePass Urufunguzo (Gukuramo Cashe Yibanze ya Offline Vault Sessions)¶

Gufunga ijambo ryibanga ryibanga (1Password, Bitwarden, KeePassXC, Proton Pass, cyangwa LastPass) nyuma ya mudasobwa igendanwa ya mudasobwa igendanwa, gusubiramo uruganda rwa terefone, guhanagura umwirondoro wa mushakisha, cyangwa gutakaza impanuka 1Password 34-inyuguti y'ibanga Urufunguzo (A3-XXXXXX-...), Bitwarden Intambwe ebyiri Zinjira Kwinjira Kode, cyangwa KeePass .keyx urufunguzo ni ikibazo gikomeye kiranga imibare. Abayobora ijambo ryibanga rya zeru bigezweho bahishe ububiko bwawe mugikoresho cyawe ukoresheje AES-256-GCM cyangwa ChaCha20-Poly1305 bikomoka PBKDF2-HMAC-SHA256 cyangwa Argon2id mbere byte imwe yigeze ikora ku gicu. Kuberako utanga atigera atunga ijambo ryibanga rya Master, Urufunguzo rwibanga, cyangwa urufunguzo rwibanze, ubufasha bwabakiriya kuri AgileBits (1Password) cyangwa Bitwarden ntishobora gusubiramo ijambo ryibanga cyangwa gufungura ububiko bwawe muri seriveri zabo mubihe byose.

Ariko, igicu cyinjira gifunga hafi ya byose ntabwo bivuze ko ijambo ryibanga ryagiye burundu. Mugihe cyose ** niyo igikoresho kimwe cyinjiye mbere ** (terefone ishaje, tablet ya kabiri, mudasobwa igendanwa, umwirondoro wakazi, umwirondoro wa iCloud cyangwa Google Drive, cyangwa Windows Volume Shadow Copy / macOS Time Machine disiki ya disiki) iracyafite ububiko bwibanga bwibanze ()1Password.sqlite, Bitwarden data.json, cyangwa .kdbx kopi) kandi uracyamenya ** Ijambo ryibanga rya ** (cyangwa ufite biometric Touch ID / Face ID / Windows Hello yagizwe kuri kiriya gikoresho cya kabiri), urashobora gufungura cache yaho ya interineti muri Mode y'Indege hanyuma wohereze 100 ku ijana ryibanga ryibanga mbere yuko seriveri igicu ikuraho ikimenyetso cyicyiciro. Kubintu byihutirwa byemewe, reba ijambo ryibanga gufunga no kugarura ijambo ryibanga, porogaramu yemewe TOTP yatakaye mugihe cyo kuzamura terefone cyangwa kumenagura ecran, na MFA gufunga no kugarura ibyemezo. Niba gufunga kwawe birimo ubuzima bwihuse cyangwa ikibazo cyubuvuzi, hamagara numero yihutirwa yawe (911 muri Amerika no muri Kanada, 112 hirya no hino mu muryango w’ubumwe bw’ibihugu by’Uburayi, 999 mubwongereza) cyangwa ubaze igitabo cyacu cya nimero yihutirwa.

Kora ubu¶

1. ** Shyira BURI mudasobwa ya kabiri, terefone, na tablet byigeze bigera kumuyobozi wibanga Airplane Mode (guhagarika Wi-Fi hanyuma ucomeke Ethernet) MBERE yo gukangura ecran cyangwa gufungura porogaramu **:
2. ** Kuki kwitandukanya numuyoboro ari intambwe yawe yambere **: Niba konte yawe ya konte yabiherewe uburenganzira, ikimenyetso cya 2FA cyongeye gusubirwamo, cyangwa abiyandikishije barashize, umwanya wigihe 1Password cyangwa Bitwarden porogaramu kuri mudasobwa igendanwa ya kabiri cyangwa terefone ishaje ihuza na interineti, itora API ya kure (my.1password.com cyangwa identity.bitwarden.com), yakira an HTTP 401 Unauthorized cyangwa isomo ryo gukuraho ibimenyetso, kandi ** ihita isukura hafi ya interineti yabitswe neza (data.json / 1Password.sqlite) kuva kuri disiki **.
3. Kugumisha igikoresho 100 ku ijana kuri interineti bihatira porogaramu ya desktop, porogaramu igendanwa, cyangwa iyagurwa rya mushakisha gusubira kuri ** Offline Cache Unlock Mode **, ikwemerera gufungura ububiko ukoresheje ijambo ryibanga rya Master gusa (cyangwa biometrike) udakeneye kode ya 2FA cyangwa urufunguzo rushya rwibanga.
4. ** Ntukigere ukanda "Log Out", "Remove Account", "Clear Browser Data", cyangwa "Reinstall App" ku gikoresho gifunze **: Gusohoka hanze ya Bitwarden ya mushakisha ya porogaramu cyangwa porogaramu ya desktop ya 1Password ihita ihanagura ububiko bwaho Secret Key umutungo hamwe na encrypt vault blob. Kureka porogaramu ifunze idakoraho hanyuma ukoporore ububiko bwamakuru bwibanze mububiko bwizewe bwambere.
5. ** Sobanukirwa nikihe muri bitatu bya lockout wabuze **:
6. ** Kubura 1Password 34-Urufunguzo rwibanga Urufunguzo (A3-...) **. 1Password Emergency Kit.pdf, imbere muri Apple Keychain (iCloud Keychain) kuri Mac / iOS, cyangwa imbere ibikoresho byose bishaje.
7. ** Kubura Bitwarden 2FA Authenticator / Recovery Code ** (mugihe ukiri uzi ijambo ryibanga rya Master): Kuberako Bitwarden ya 2FA gusa amarembo ** kwemeza seriveri ** (ntabwo ari encryption yaho), igikoresho icyo aricyo cyose kimaze kugira cashe data.json fayili yububiko kuri disiki irashobora gufungurwa kumurongo ukoresheje ijambo ryibanga rya Master gusa, cyangwa ugafungurwa ukoresheje isoko ifunguye hanze ya Bitwarden vault ikuramo (bitwarden-decrypt).
8. ** Kubura KeePass / KeePassXC Urufunguzo (.key / .keyx) ** (mugihe ukiri kumenya ijambo ryibanga rya Master): Urufunguzo rwogejwe binyuze SHA-256 muri urufunguzo rwibanze; ugomba kugarura dosiye ya byte-kuri-byte kuva mumirenge ya disiki, Volume Shadow Copies, imyanda yibicu, cyangwa mushakisha / OS iheruka-dosiye.
9. ** Mbere yo gufungura ububiko ubwo aribwo bwose kuri interineti ku gikoresho cya kabiri, koresha ububiko bwaho bwaho muri disiki ya USB yo hanze **: Kuri Windows, macOS, cyangwa Linux, kora byose %LocalAppData%\1Password, %AppData%\Bitwarden, cyangwa mushakisha Local Extension Settings Ububiko Kuri Ububiko butandukanye kuburyo niyo porogaramu idahwitse kandi igahanagura cache yayo, uracyafite kopi yambere yububiko bwa SQLite / JSON.
10. ** Niba igikoresho cyawe gisigaye cyinjiye ari terefone cyangwa mudasobwa igendanwa ifungura biometrike (Face ID, Touch ID, Windows Hello) kandi wibagiwe Ijambobanga ryibanga ubwaryo **: Ntugakore ** ntugasubiremo icyo gikoresho (rebooting ikuraho urufunguzo rwa biometric muri RAM kandi uhatira Master Password guhita ubanza gufungura). Fungura porogaramu ukoresheje Face ID cyangwa Touch ID mugihe muri Indege Mode, fungura ibyangombwa-byingenzi byihutirwa, hanyuma urebe intoki cyangwa wandukure ijambo ryibanga ako kanya.
11. ** Shakisha buri mudasobwa, umugereka wa imeri, Ububiko bwa dosiye, hamwe nigicu cya "Emergency Kit" cyangwa "bitwarden_recovery_code" ubungubu **: Igihe 1Password ubanza gukora konte yawe, yahatiye gushakisha gukuramo dosiye yitwa 1Password Emergency Kit.pdf (cyangwa wabitse Passkey / Ibanga Urufunguzo rwinjira muri Apple Keychain Access). Koresha sisitemu-shakisha mbere yo gutekereza ko urufunguzo rwagiye.

Igiti cyemezo: umuyobozi wibanga gufunga triage no gukuramo umurongo wa vault¶

Kurikiza iyi forensic kugarura akazi ukurikije urwego rwibanga ryibanga hamwe no kwemeza wabuze:

flowchart TD
    Start["Ifunze Ijambobanga Umuyobozi (1Password, Bitwarden, KeePassXC, Passon Pass)"] --> IsolateNow["INTAMBWE 1: Shyira Laptop Yose Yisumbuye, Terefone, & Tableti MODE YUBUNTU Ako kanya (Mbere yo gufungura porogaramu cyangwa mushakisha)"]

    IsolateNow --> WhichApp{"Nuwuhe ijambo ryibanga & Impamyabushobozi Yabuze?"}

    WhichApp -->|"1Ijambo ryibanze: Yatakaye 34-Char Urufunguzo rwibanga (A3-XXXXXX ...), Uracyamenya Ijambo ryibanga"| OnePassCheck{"Ufite Igikoresho icyo aricyo cyose kiracyinjira (Cyangwa Ububiko bwa Mac / iPhone)?"}

    OnePassCheck -->|"YEGO: Yinjiye muri porogaramu kuri Terefone ishaje, Tablet, cyangwa PC"| Extract1PKey["Fungura porogaramu ya Offline -> Kanda Konti ya konte -> 'Shiraho ikindi gikoresho' cyangwa 'Reba urufunguzo rwibanga' kugirango uhishure A3 -... Urufunguzo (CYANGWA Gukuramo 1Password.sqlite / Urufunguzo rwa Apple)"]

    OnePassCheck -->|"OYA: Gusa Gira Imashini Yigihe, Kopi ya Windows Igicucu, cyangwa Gukuramo Ububiko"| Search1PKit["Shakisha Disiki & Ibikubiyemo kuri '1Password Emergency Kit.pdf', '1Password.sqlite', cyangwa 'opvault' / 'b5.sqlite'"]

    WhichApp -->|"Bitwarden: Yatakaye 2FA TOTP Porogaramu & 2FA Kode yo Kugarura, Uracyamenya Ijambobanga ryibanga"| BitwardenCheck{"Ese Ibiro bya Bitwarden cyangwa Kwagura Browser Biracyinjira mubikoresho byose (Offline)?"}

    BitwardenCheck -->|"YEGO: Cashe Vault iri kuri Disiki"| UnlockBWOffline["Gumana Igikoresho muburyo bw'indege -> Fungura porogaramu ya Bitwarden / Kwagura hamwe na Ijambobanga ryibanga -> Kohereza ibicuruzwa muri .json / .csv -> Hanyuma usubize konte & Ongera utumire"]

    BitwardenCheck -->|"OYA: Kwagura bifunze cyangwa byasohotse, ariko 'data.json' Biri kuri Disiki / Ububiko"| DecryptBWJson["Gukoporora 'data.json' kuva muri AppData cyangwa Browser UrwegoDB -> Koresha Offline 'bitwarden-decrypt' Inyandiko ya Python ukoresheje ijambo ryibanga rya Master"]

    WhichApp -->|"KeePass / KeePassXC: Yatakaye Urufunguzo (.keyx / .key) cyangwa ruswa .kdbx"| KeePassRescue["1. Reba KeePassXC '.kdbx.tmp' & Amateka y'Igicu. 2. Shakisha Disiki ya Keyfile ukoresheje 'Byose' / Photorec cyangwa Windows Volume Shadow Copy (vssadmin)"]

    WhichApp -->|"Wibagiwe Ijambo ryibanga ryonyine (Uracyafite Biometric Gufungura Bikora kuri Terefone / Laptop)"| BiometricRescue["NTUGASUBIZE IBIKORWA: Komeza muburyo bwindege -> Fungura Vault ukoresheje Face ID / Touch ID / Windows Mwaramutse -> Gukoporora ijambo ryibanga"]

Icyiciro cya 1: Kugarura abazimiye 1Password Urufunguzo rwibanga (A3-XXXXXX-...) na vault kumurongo¶

1Password (verisiyo 7 na 8) ikoresha ** Ibanga-Amabanga abiri y'ingenzi ()2SKD) ** ubwubatsi: urufunguzo rwibanga rwa vault (MPK) ni imibare ikomoka muguhuza ** Ijambobanga ryibanga ** (binyuze PBKDF2-HMAC-SHA256) hamwe nuburyo butunguranye bwakozwe 128-bit ** Urufunguzo rwibanga ** rwahinduwe nkumugozi winyuguti 34 utangirana na A3- (urugero, A3-ABCDEF-GHIJKL-MNOPQR-STUVWX-YZ1234-567890). Bitabaye ibyo A3- Urufunguzo rwibanga, kumenya ijambo ryibanga rya shobuja wenyine ntabwo bihagije mu mibare kugirango uhishure amakuru kuva muri seriveri 1Password.

Ariko, ** Urufunguzo rwibanga ntabwo ari ibanga mubikoresho byawe **: buri gikoresho kimwe cyigeze cyinjira muri konte yawe ya 1Password kibika byuzuye A3- Urufunguzo rwibanga kuri disiki yabubiko bwaho kuburyo utagomba kwandika inyuguti 34 buri gitondo.

Uburyo 1: Guhishura ibyawe A3- Urufunguzo rwibanga ruva muri terefone iyo ari yo yose, tablet, cyangwa mudasobwa¶

Reba buri terefone, iPad, mudasobwa igendanwa, cyangwa mushakisha ya desktop aho wigeze ukoresha 1Password (gumana igikoresho muri ** Indege Mode ** mbere): 1. ** Ku 1Password 8 kuri iOS / Android **: - Fungura porogaramu ya 1Password -> kanda ** Konti yawe / Ishusho yumwirondoro ** mugice cyo hejuru-ibumoso -> kanda Set Up Another Device (cyangwa Manage Accounts -> [Your Account] -> Set Up Another Device). - Kanda View Account Details munsi ya QR code: byuzuye A3-...rufunguzo rwibanga rugaragara muandiko isanzwe neza kuri ecran. Andika ku mpapuro ako kanya. 2. Ku klzzwxh:09 kuri macOS / Windows / Linux : - FunguraIjambo ryibanze -> kanda izina rya ** Konti yawe ** kuruhande rwibumoso-ibumoso -> hitamo Set Up Another Device... -> kanda secret key and sign-in address kwerekana neza A3-... umugozi. 3. Imbere yawe 1ssword Vault ubwayo : - Buri koe ya 1Password ihita itanga ibintu byubatswe mububiko bwitwa 1Password Account (login) imbere muri Private / Prite ** ububiko bwawe kumunsi wambere. Niba ushobora gufungura 1Password kumurongo kubikoresho byose, shakisha ububiko bwawe kuri 1Password Account; ikubiyemo byombi Ijambo ryibanga rya ** na ** Urufunguzo rwibanga **.

Uburyo bwa 2: Gukuramo abazimiye 1Password Urufunguzo rwibanga rwa Apple iCloud Keychain cyangwa macOS Keychain Access¶

Niba warigeze kwinjira 1Password kuri iPhone, iPad, cyangwa Mac ukoresheje Safari cyangwa porogaramu kavukire, sisitemu y'imikorere ya Apple ihita itanga kubika amakuru yawe yinjira 1Password cyangwa Account Key imbere ** Urufunguzo rwa Apple / Ijambobanga **: 1. ** Kuri macOS Sonoma / Sequoia (macOS 14 / 15+) cyangwa iOS 17/18 **: - Fungura porogaramu ya ** Ijambobanga ** (cyangwa System Settings -> Passwords) no gufungura hamwe na Touch ID cyangwa ID ID. - Shakisha 1password.com cyangwa 1Password Account Key. - Kugenzura izina ukoresha, ijambo ryibanga, cyangwa inoti zabitswe: Safari na 1Password ya iOS bikunze kubika byuzuye A3-XXXXXX-... Urufunguzo rwibanga imbere rwabitswe ibyangombwa byabitswe my.1password.com. 2. Muri macOS kzwxh:0081 (local items / iCloud) : - Kanda zzwxh:0084, andika Keychain Access, hanyuma ushakishe 1Password, agilebits, cyangwa A3-. - Kanda inshuro ebyiri zose zihuye application password kwinjira no kugenzura Show password.

Uburyo bwa 3: Gukuramo A3- Urufunguzo rwibanga cyangwa ububiko bwavuye muri disiki (1Password.sqlite & Emergency Kit.pdf)¶

Nubwo porogaramu ya desktop ya 1Password idafungura cyangwa mudasobwa yawe ntishobora gukururwa (yashizwe nka disiki ya kabiri cyangwa yagaruwe kuva a Time Machine / File History / Backblaze backup), reba neza aho disiki iherereye:

Icyiciro cya 2: Gukira kuva a Bitwarden 2FA gufunga (data.json gukuramo cache kumurongo no gukuramo)¶

Niba waratakaje porogaramu yawe ya TOTP Authenticator, ibyuma YubiKey, hamwe na ** Bitwarden Intambwe ebyiri Zinjira Kwinjira Kode **, seriveri ya Bitwarden (vault.bitwarden.com) azanga kukwemerera kwinjira muri mushakisha nshya cyangwa terefone. Nyamara, igishushanyo mbonera cya Bitwarden kiguha inyungu zikomeye zo gutabara: ** 2FA ya Bitwarden ikwemerera gusa kurubuga API; ntabwo ari igice cyurufunguzo rwibanga (masterKey / encKey) ikoreshwa kugirango uhishe dosiye yawe yububiko (data.json) **.

Ibyo bivuze ko niba ukizi ** Ijambobanga ryibanga rya ** Bitwarden, kandi ufite ** mudasobwa iyo ari yo yose, terefone, cyangwa backup ** ikubiyemo kopi yabitswe ya Bitwarden yaho data.json cyangwa IndexedDB / LevelDB ububiko uhereye igihe winjiye, urashobora gushishoza 100 ku ijana ijambo ryibanga rya interineti.

Uburyo 1: Gufungura porogaramu ikiri kwinjira muri porogaramu ya Bitwarden cyangwa kwagura muri Airplane Mode¶

1. ** Hagarika mudasobwa cyangwa terefone kuri enterineti burundu ** (kuzimya Wi-Fi, fungura Ethernet, ushoboze Indege Mode kuri mobile).
2. Fungura porogaramu ya desktop ya ** Bitwarden **, ** Kwagura Browser ** (Chrome, Intwari, Edge, Firefox), cyangwa ** Porogaramu igendanwa **.
3. Igihe cyose porogaramu yari muri leta ya ** "Ifunze" ** (gusaba ijambo ryibanga rya Master cyangwa PIN / Biometrics) aho kuba ** "Yinjiye hanze" ** (gusaba aderesi imeri yawe), ** wandika ijambo ryibanga rya Master mugihe mugihe udafunguye ufunguye ububiko bwa cashe bwaho utabanje gusaba 2FA **.
4. Ako kanya jya kuri Settings -> Vault options -> Export vault (cyangwa File -> Export Vault kuri desktop), hitamo .json. .json dosiye kuri USB ibanga cyangwa ibikoresho bya VeraCrypt.
5. Umaze kugenzura ko ibyoherejwe hanze .json dosiye ikubiyemo login zawe zose mubanditsi banditse, urashobora kujya neza kuri vault.bitwarden.com/#/recover-delete (cyangwa vault.bitwarden.eu/#/recover-delete), gusiba konte ya 2FA ifunze, kora konti nshya ya Bitwarden hamwe na imeri imwe, hanyuma ukande Tools -> Import Data -> Bitwarden (json) kugarura ububiko bwawe bwose mumasegonda 30.

Uburyo bwa 2: Gufungura Bitwarden data.json cyangwa Mucukumbuzi LevelDB biturutse kuri disiki (bitwarden-decrypt)¶

Byagenda bite niba porogaramu ya desktop ya Bitwarden cyangwa iyagurwa rya mushakisha ritazafungura muri UI, cyangwa disiki ya mudasobwa yawe igashyirwa kuri backup, ** cyangwa ufite gusa ububiko bwibanze bwa data **?

1. ** Shakisha Bitwarden yawe data.json cyangwa ububiko bwagutse bwa mushakisha kuri disiki ** (kora backup yububiko bwububiko mbere yo kuyikoraho):

1. ** Menya neza ko imizigo ibitswe neza ikiri imbere data.json**:
2. Fungura kopi yawe data.json dosiye mu mwandiko wanditse (Notepad cyangwa VS Code).
3. Shakisha imirongo "ciphers_ na "encKey" (cyangwa "masterKeyEncryptedUserKey" muri Bitwarden nshya stateVersion imigambi).
4. Niba ubona imirongo amagana ya "2.iv|ciphertext|mac" imirongo munsi ciphers_<userId>.
5. ** Gufungura data.json ukoresheje interineti bitwarden-decrypt (Gufungura-Inkomoko ya Python Ikoreshwa) **:
6. Kuri mudasobwa iyo ari yo yose ifite Python 3 yashizwemo, kuramo ubugenzuzi bwagenzuwe-isoko bitwarden-decrypt Inyandiko (github.com/GurpreetKang/BitwardenDecrypt) ushyira mubikorwa Bitwarden neza PBKDF2-SHA256 / Argon2id + HKDF-Expand + AES-256-CBC-HMAC-SHA256 urwego rw'ibanze:

   pip install cryptography argon2-cffi
   python3 BitwardenDecrypt.py data.json --output recovered_vault.json
   

7. Injira ** Bitwarden Master Ijambobanga ** mugihe ubajije. Inyandiko ikomokaho masterKey uhereye kuri imeri yawe na Ijambobanga ryibanga, ufungura ibyawe encKey (masterKeyEncryptedUserKey), kandi isohora isuku, isomwa n'abantu recovered_vault.json ikubiyemo buri kwinjira, ijambo ryibanga, imbuto ya TOTP, hamwe ninyandiko itekanye.

Icyiciro cya 3: Gukira kuva a KeePass cyangwa KeePassXC Gutakaza urufunguzo cyangwa .kdbx ruswa¶

Bitandukanye nabacumbitsi bakiriye, KeePass 2.x na KeePassXC bika ububiko bwawe muri standalone .kdbx dosiye (KDBX 4.x format) ihishe ukoresheje ** Urufunguzo rwibanze Urufunguzo **. Niba warashizeho base yawe kugirango usabe ** byombi Ijambobanga ryibanga na Keyfile (.key cyangwa .keyx) **, KeePass ifite ibyuzuye neza muri urufunguzo hamwe SHA-256 ikomatanya iyo 32-byte hash hamwe nijambobanga hash mbere yo gukora Argon2d/Argon2id.

1. Nigute ushobora kubona ahasimbuwe cyangwa wasibwe .key / .keyx Urufunguzo (cyangwa ishusho / inyandiko ikoreshwa nkurufunguzo)¶

Kuberako gutakaza urufunguzo bihwanye no gutakaza 256-bit ya cryptographic urufunguzo, ntushobora gukomeretsa-kubura urufunguzo rwabuze; ugomba ** gushakisha kopi ya byte-imwe ya dosiye **: 1. ** Kugenzura KeePassXC.ini / KeePass.config.xml kugirango ubone neza izina ryanyuma ryakoreshejwe izina ninzira ya urufunguzo **: - Akenshi abakoresha bibagirwa * dosiye * kuri mudasobwa yabo bahisemo nkurufunguzo rwabo (abakoresha benshi bahitamo ikintu kidasanzwe .jpg ifoto, .pdf inyandiko, cyangwa izina ryizina ridasobanutse kuri USB Drive). - Fungura dosiye yawe yibanze muguhindura inyandiko: - ** KeePassXC (Windows) : %AppData%\KeePassXC\keepassxc.ini (or %LocalAppData%\KeePassXC\keepassxc.ini) -> reba munsi ya [LastDatabases] cyangwa LastKeyFiles. - KeePassXC (kzwxh:0143 / Linux) : klzzwxh:014 cyangwa /home/<Username>/.config/keepassxc/keepassxc.ini. - KeePass 2.x (lzzwxh:0147) : %AppData%\KeePass\KeePass.config.xml -> shakisha **lzzwxh:0149. - Kumenya izina ryukuri ninzira yububiko (E:\Keys\my_secret_pic.jpg) ikubwira inkoni ya USB, ikarita ya SD, cyangwa ububiko bwububiko bwo gushakisha. 2. ** Kora ibyasibwe .keyx XML Urufunguzo ruva mumwanya wa disiki itagabanijwe mumasegonda 60 : - Bisanzwe KeePass / KeePassXC byakozwe na urufunguzo (.keyx cyangwa .key Imiterere ya XML) ni nto (< 1 KB dosiye) bitangirana numutwe XML wihariye:

<?xml version="1.0" encoding="utf-8"?>
<KeyFile>
    <Meta>
        <Version>1.00</Version>

2. Gukosora ruswa .kdbx Ububikoshingiro (Invalid signature cyangwa HMACHashMismatch nyuma yo gutakaza ingufu cyangwa guhuza ibicu)¶

Niba ari ibyawe .kdbx dosiye Not a KeePass database cyangwa Corrupted database / HMAC mismatch nyuma yo guhanuka kwa mudasobwa cyangwa Google Drive / OneDrive ikomatanya: 1. ** Reba ibyihishe .kdbx.tmp cyangwa .kdbx.bak atomic-andika dosiye zabavandimwe **: - Mburabuzi, KeePassXC ikoresha ** Kubika Umutekano (Andika Andika) **: yandika impinduka kuri dosiye yigihe gito mububiko bumwe mbere, hanyuma ikayita izina hejuru yumwimerere .kdbx. Reba mububiko bumwe (hamwe namadosiye yihishe ashoboye) kuri buriwese .tmp, .bak, cyangwa amakopi yamakimbirane (Passwords (Conflicted copy).kdbx). 2. ** Kugarura verisiyo y'ejo kuva Amateka ya Cloud cyangwa Windows Shadow Copy **: - Niba ari ibyawe .kdbx yicaye imbere muri Dropbox, Google Drive, OneDrive, cyangwa iCloud Drive, injira kumurongo wurubuga rwibicu muri mushakisha yawe, kanda iburyo- .kdbx dosiye, hanyuma uhitemo Version History gukuramo ivugurura ryabanje kuva mbere ya ruswa. 3. Koresha KeePa 2.x Yubatswe muri Repair Mode Kuzana : - Funguraumugaragaro ** KeePass 2.x ** kuri Windows -> kora ububiko bushya-bushya bwuzuye -> kanda File -> Import... -> hitamo KeePass KDBX (2.x) (Repair Mode) -> iyereke kuri ruswa yawe .kdbx dosiye hanyuma wandike ijambo ryibanga. Uburyo bwo gusana bwirengagije imigezi yamenetse ya HMAC kandi ikiza buri kintu gisomeka cyinjira kugeza byangiritse byte.

Icyiciro cya 4: Gukuramo ububiko bwa cashe muri iOS, Android, na macOS ibika (iMazing, Time Machine, na DPAPI kwibuka)¶

Byagenda bite se niba terefone yawe y'ibanze yatakaye, yibwe, cyangwa gusubiramo uruganda, kandi mudasobwa igendanwa yawe yari imaze guhanagurwa cyangwa gusohoka, bigasigarana na zeru zikora? Urashobora kuvanaho ijambo ryibanga rya enterineti kuri vault muri ** iphone yububiko bwaho, macOS Time Machine snapshot, cyangwa Windows hibernation / dosiye yajugunywe **.

1. Gukuramo 1Password cyangwa Bitwarden SQLite / JSON yububiko bwa iPhone cyangwa iPad ibitse (iMazing / idevicebackup2)¶

Igihe cyose usubije iphone cyangwa iPad kuri Mac cyangwa Windows PC (cyane cyane ** Ibanga ryibanze ryibanze rya ** muri Finder cyangwa iTunes), ububiko bwibikubiyemo bufata ibikoresho bya sandbox ya porogaramu ya 1Password na Bitwarden: 1. ** Ntugasubize kugarura kuri terefone nzima ya terefone ibanza **: Niba usubije ibikubiyemo kuri terefone ihuza Wi-Fi mugihe cya Setup Assistant, porogaramu yagaruwe izahita ikubita seriveri yibicu hanyuma ihanagure ikimenyetso cyarangiye. 2. ** Koresha iMazing cyangwa iBackup Viewer kuri mudasobwa itari kumurongo kugirango urebe fayili yububiko bwibanze **: - Fungura iphone yawe yimbere muri iMazing (File System -> Apps -> 1Password cyangwa Bitwarden). - Kuri 1Password: Jya kuri AppDomainGroup-group.com.agilebits.onepassword-ios/Library/Application Support/1Password/Data/ no gukuramo 1Password.sqlite (cyangwa B5.sqlite). Imbere accounts imbonerahamwe yiyo dosiye ya SQLite yicaye neza A3-XXXXXX-... Urufunguzo rwibanga. - Kuri Bitwarden: Jya kuri AppDomainGroup-group.com.8bit.bitwarden/Library/Preferences/ no gukuramo group.com.8bit.bitwarden.plist. Hindura binary .plist Kuri XML (plutil -convert xml1 group.com.8bit.bitwarden.plist) hanyuma ukingure mu mwandiko wanditse: ikubiyemo kimwe ciphers_<userId> na masterKeyEncryptedUserKey Imiterere ya JSON ikoreshwa na BitwardenDecrypt.py, kukwemerera gufungura buri jambo ryibanga kumurongo ukoresheje ijambo ryibanga rya Master.

2. Gukuramo Proton Pass, Dashlane, na LastPass Kurubuga rwa interineti¶

Niba gufunga kwawe birimo Proton Pass, Dashlane, cyangwa LastPass: - **Proton Pass Offline Mode & Browser Kwagura Cache **: Passon Pass ifata ibanga ryibanga ryibanze muri Chromium IndexedDB (chrome-extension_<id>_0.indexeddb.leveldb). Niba ubitse mudasobwa igendanwa muri ** Indege Mode **, fungura mushakisha, hanyuma ufungure Passon Pass ukoresheje ijambo ryibanga cyangwa PIN, urashobora kwinjira mububiko bwawe bwa interineti hanyuma ugahereza hanze cyangwa ukareba ibyangombwa byawe mbere yo kongera guhuza umuyoboro. - **LastPass Ububiko bwa Offline (lpall.slp / acct.slp) **: Kuri Windows (%LocalAppData%\LastPass cyangwa %AppData%\LocalLow\LastPass) na macOS (/Users/<Username>/Library/Application Support/LastPass), Ububiko bwa nyuma bubika an AES-256 shishoza XML / SQLite cache dosiye yitiriwe imeri yawe hash. Guhagarika Wi-Fi no kwinjira muri verisiyo yanyuma ya mushakisha ya LastPass hamwe na Ijambobanga rya Master yawe irengana ibyemezo byinshi byavunitse kandi bigafungura ububiko bwa interineti butaziguye.

3. Kujugunya ububiko butarafunzwe muri Windows RAM (Task Manager -> Create dump file) mbere yo gufunga ku gahato¶

Niba ubonye ko wibagiwe Ijambobanga rya Master (cyangwa wasibye urufunguzo rwa KeePass mugihe data base iriho ubu ikinguye kandi ifunguye kuri ecran yawe nonaha **), ** NTUFUNZE data base cyangwa funga idirishya **. 1. Ndetse n'igihe KeePassXC, Bitwarden, cyangwa 1Password iragusaba kongera kwandika ijambo ryibanga rya Master kugirango ukande Export Vault buto, ibanga ryabitswe ryinjira cyangwa ibikomoka kuri 256-bit MasterKey kuri ubu bicaye mubikorwa byo kwibuka (RAM) mugihe idirishya rya vault rifunguye. 2. Ubwa mbere, kanda unyuze kumurongo wambere wibanze kuri ecran (imeri, amabanki, konti yibicu, umwanditsi wa domaine) hanyuma ubyandukure muri dosiye ihishe cyangwa ubifotore. 3. For KeePass / KeePassXC: Mugihe data base ikinguye, niba wibagiwe ijambo ryibanga rya Master cyangwa wasibye urufunguzo, reba niba File -> Export -> CSV ikora ** idafite ** ibaza ijambo ryibanga ryibanga (muburyo bwinshi bwa KeePassXC, kohereza ibicuruzwa bimaze gufungurwa kuri CSV cyangwa HTML ntibisaba kongera kwinjiza urufunguzo).

Ibibazo bikunze kubazwa¶

Ese 1Password cyangwa Bitwarden inkunga yabakiriya irashobora gufungura ububiko bwanjye iyo mboherereje pasiporo ya leta nindangamuntu ya noteri?¶

Oya, ntibishoboka mu mibare. Byombi 1Password na Bitwarden bakoresha impera-iherezo zeru-ubumenyi umukiriya-uruhande rwibanga. Ijambo ryibanga rya shobuja (na 1Password ya 34-inyuguti A3- Urufunguzo rwibanga) ntuzigere uva mubikoresho byawe kandi ntuzigera woherezwa kuri seriveri yabo. Nubwo urukiko rwahamagaje AgileBits cyangwa Bitwarden, cyangwa ukaba watanze pasiporo ya noteri imbonankubone ku cyicaro cyabo, seriveri zabo zifata gusa kodegisi ya ciphertext (AES-256) ibyo ntibishobora gufungurwa nta mfunguzo zibitswe kubikoresho byawe bwite.

Kuki guhagarika Wi-Fi (Mode y'Indege) reka mfungure Bitwarden nta kode yanjye yatakaye?¶

Mu mutekano wa Bitwarden, Kwinjira-Intambwe ebyiri (2FA) ni igenzura ryemezwa ryashyizwe mubikorwa na Bitwarden igicu cya seriveri mugihe ukuramo ibanga ryibanga ryibanga kuri enterineti; ni ntabwo ikoreshwa nkigice cyurufunguzo rwibanga rwihishwa. Igikoresho kimaze kwinjira rimwe, Bitwarden cashe ihishe ububiko imbere data.json (cyangwa mushakisha UrwegoDB) urinzwe nuwawe Ijambobanga ryibanga. Iyo ubitse mudasobwa cyangwa terefone Uburyo bw'indege, porogaramu ifungura kopi yaho yabitswe ukoresheje ijambo ryibanga rya Master gusa kandi ikwemerera kohereza ijambo ryibanga ryose kuri a .json cyangwa .csv dosiye.

Byagenda bite se niba naribagiwe ijambo ryibanga rya Master, nta bikoresho byihutirwa mfite, kandi isomo ryanjye rifunguye ni kuri iPhone yanjye hamwe na ID ID?¶

Niba iPhone cyangwa iPad yawe igifungura ijambo ryibanga ukoresheje Indangamuntu yo mumaso cyangwa ID ID, fata iyo terefone nkibikoresho byo guta ibisasu: komeza ucomeke muri charger, uyishyire muburyo bwindege, kandi ntukemere ko bateri ipfa cyangwa kongera gukora terefone. Niba terefone yongeye gukora, cyangwa niba Face ID yananiwe inshuro 3 kugeza kuri 5 zikurikiranye, porogaramu ihindura urufunguzo rwibanga rwa biometric uhereye kumasomo ya Secure Enclave ikaguhatira kwandika ijambo ryibanga ryibagiwe. Menya ko kohereza ibicuruzwa muri Igenamiterere -> Kohereza hanze mubisanzwe bisaba kwandika Master Ijambobanga nubwo rifungura ukoresheje ID ID; kubwibyo, ntugerageze gukoresha ibicuruzwa byinshi byohereza hanze. Ahubwo, fungura hamwe na ID ID na fungura intoki buri konti yingenzi yinjira umwe umwe, kanda agashusho k'ijisho kugirango uhishure ijambo ryibanga, hanyuma ufotore cyangwa wandike buri jambo ryibanga kurupapuro.

Nigute nakwirinda ijambo ryibanga umuyobozi wibanga kugirango bitazongera kubaho namara kugarura ububiko bwanjye?¶

Ako kanya nyuma yo kugarura ububiko bwawe, shyira mu bikorwa 3-Imirongo Ifatika + Offline Yibitseho Amategeko: (1) Shira impapuro ebyiri zifatika za kopi yawe 1Ijambo ryibanga ryihutirwa (cyangwa ijambo ryibanga rya Bitwarden + 2FA Kode yo Kugarura) hanyuma ubike imwe mu nzu itagira umuriro n'indi mu isanduku yo kubitsa muri banki cyangwa hamwe n'umuryango wizewe; (2) Kohereza ibicuruzwa byabitswe mu bubiko bwawe (.kdbx cyangwa ijambo ryibanga ririnzwe Bitwarden .json) kuri disiki ebyiri zitagaragara kuri USB flash buri minsi 90; na (3) Niba ukoresha 1Ijambo ryimiryango cyangwa Imiryango ya Bitwarden / Uruganda, tanga umufatanyabikorwa wizewe cyangwa konte ya kabiri ya admin kuruhare rwa ** Konti yo Kugarura **, ifite urufunguzo rwa escrow rushobora gusubiramo umuryango wibagiwe Mwibanga ryibanga cyangwa wabuze Urufunguzo rwibanga.

Kuyobora¶

• Umuyobozi wibanga ryibanga, gutakaza ijambo ryibanga, no kugarura ububiko
• Porogaramu yemewe TOTP yatakaye mugihe cyo kuzamura terefone cyangwa kumenagura ecran
• MFA gufunga no kugarura ibyemezo
• Gutakaza ibikoresho bya Passkey na WebAuthn: bihujwe na passkeys ihuza ibyuma
• VeraCrypt, BitLocker, cyangwa Cryptomator yangije amajwi umutwe kugarura
• Imibare yihutirwa ukurikije igihugu

Inkomoko nubuyobozi¶

• 1Ijambo ryibanga ryumutekano Impapuro zera & Inyandiko zunganira (support.apple.com / support.1password.com/secret-key-security/ & support.1password.com/find-secret-key/): * Amabanga abiri y'ibanga nyamukuru ()2SKD), A3- Ububiko bwibanze bwibanga kubikoresho byemewe, hamwe nuburyo bwihutirwa bwo kugarura ibikoresho *.
• Bitwarden Umutekano Wemewe & Cryptographic Impapuro zera (bitwarden.com/help/bitwarden-security-white-paper/ & bitwarden.com/help/storage-locations/): * Ijambo ryibanga ryibanga rikomoka (PBKDF2-SHA256 / Argon2id), Byibanze data.json Ahantu Ububiko bwa Offline, hamwe na Intambwe ebyiri zo Kwinjira Kugarura *.
• KeePass / KeePassXC Inyandiko zemewe (keepass.info/help/base/keys.html & keepass.info/help/base/repair.html): * Gukomatanya Master Key Key Architecture, .keyx XML Urufunguzo rwibanze, na KDBX 4.x Uburyo bwo Gusana Ibitumizwa *.
• GurpreetKang Gufungura-Inkomoko ya Forensic Tool (github.com/GurpreetKang/BitwardenDecrypt): * Offline Decryption ya Cashe Bitwarden data.json Ububiko bwa dosiye ukoresheje ijambo ryibanga rizwi *.