Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

I forgot my password and lost my recovery codes #1

Open
hughware opened this issue Jul 4, 2024 · 3 comments
Open

I forgot my password and lost my recovery codes #1

hughware opened this issue Jul 4, 2024 · 3 comments

Comments

@hughware
Copy link

hughware commented Jul 4, 2024

I tried entering my usual password, but it still didn't work. I had to manually enter the password I tried. Is there any way to automatically try and brute force it? It's my Obsidian notebook with all my notes.I'm sad to lose it.

@overheadhunter
Copy link
Member

Yes, you can bruteforce it and you have as many attempts as you want. See instructions in the README. Be aware though, that Cryptomator is bruteforce-resistant, so you need to reduce the number of guesses by attempting as few passwords as possible.

In other words, you need to know at least the password recipe, ideally some possible phrases it contains. Use any third party software of your choice to generate a list of actual passwords from this recipe and feed it to this tool.

If you can't remember any password compounds and it is sufficiently long, bruteforcing will most likely take millenia.

@hughware
Copy link
Author

hughware commented Jul 4, 2024

Thank you very much, I am using cracker-win.exe
The command I ran was

 .\cracker-win.exe .\masterkey.cryptomator

But it seems to have entered a conversational command box and did not try to brute force. After my test, when the correct password is entered in the dialog box, it will return the password, otherwise it will let you continue to enter the password. I think it is me. There is something wrong with the operation method, so what should I do?

@overheadhunter
Copy link
Member

overheadhunter commented Jul 4, 2024

The command does not generate any passwords, it just verifies the ones you feed to it. There is a detailed instruction available in this community post:

How to use of brute force tool

The important part is generating the passwords you want the tool to try. See this post for a tool recommendation.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants