A Delphi-based utility for recovering stored passwords from Firefox profiles. This tool can decrypt passwords stored in Firefox's password manager using the browser's built-in encryption mechanisms.
This tool is intended for legitimate password recovery purposes only, such as:
- Recovering your own forgotten passwords
- Data migration between browsers
- Personal security auditing
Please ensure you have the legal right to access any passwords you attempt to decrypt.
- Supports multiple Firefox profiles
- Handles newer Firefox encryption schemes
- Multiple output formats:
- Human-readable text
- JSON
- CSV
- Automatic profile detection
The tool implements Firefox's password encryption scheme, including:
- ASN.1 structure parsing
- 3DES and AES-256 decryption
- PBKDF2 key derivation
- NSS (Network Security Services) master key extraction
- Support for key4.db databases
- Windows operating system
- Firefox profile with saved passwords
- Delphi development environment (if building from source)
- sqlite DLL (include)
- Required Delphi components:
- UniDAC (for SQLite database access)
- DEC (Delphi Encryption Components)
FirefoxDecrypt.exe [options]
Options:
-f, --format FORMAT Output format (human, json, csv)
-l, --list List available profiles
-c, --choice NUMBER Profile to use (starts with 1)
-h, --help Show this help messageList available profiles:
FirefoxDecrypt.exe --listDecrypt passwords from specific profile:
FirefoxDecrypt.exe --choice 1Export as JSON:
FirefoxDecrypt.exe --format json- Locates Firefox profiles on the system
- Extracts the master key from key4.db
- Reads encrypted passwords from logins.json
- Decrypts individual entries using:
- Global salt from key4.db
- Master key derived from metadata
- Individual encryption keys for each entry
This project is intended for educational and recovery purposes only. Please ensure compliance with applicable laws and regulations in your jurisdiction.
This tool comes with no warranties or guarantees. Users are responsible for ensuring they have the legal right to access any passwords they attempt to decrypt.
Made with ❤️ using Delphi RAD Studio