Want to share with the community a script that I created to kind of survive a situation where I lost my master password but could still login to the the browser extension using TouchID. As the passwords are there and visible, I figured I could extract them!
Thanks for sharing your work. However, I think there is a much easier way to accomplish this, by entering a single line of code into the Dev Tools console after you have unlocked your browser extension. This has been discussed in a few different threads on the Community Forum and on Reddit.
@nbonamy That’s from your original post in this thread:
Just for a clear terminology: what you mean here can only be unlocking – and not login. Which is an important difference, as you can only unlock when you are logged in. (if you’re logged out, you can only log in)
Now to your last post:
This is an interesting approach but I think there are at least some hurdles - and I’m not sure if it would work in the end:
If at all, that would have to be an Enterprise organization, since only those have Account recovery. (so no free organization and no Families organization would work for that) – Hm, there is a 7-day free trial period.
Here’s a potential problem I think: this link leads you to the web vault. And you could only use Login with device in the web vault now, if you logged in there before (in that same browser, and the browser “remembers” that). Otherwise you can’t use Login with device in the web vault.
Second problem: the browser extension can’t approve a login with device request. (at least not yet) So in your case, you would have needed a logged in desktop app or mobile app to be able to approve the request.
Honestly, I don’t know – if you made it into the web vault – if you then could enroll in account recovery without having to enter the master password at least once.
If that would work, it would be an interesting alternative.
