Morvay

A lightweight utility for decrypting Chromium-based browser cookies and passwords (v10 / v20 encryption) using Windows DPAPI and AES-GCM.

Installation

npm install morvay

Usage

const morvay = require('morvay');
const path = require('path');

// 1. Get the path to your browser's Local State file
const localStatePath = path.join(process.env.LOCALAPPDATA, 'Google', 'Chrome', 'User Data', 'Local State');

// 2. Extract the Master Key
const masterKey = morvay.getMasterKey(localStatePath);

// 3. Decrypt an encrypted value (e.g., from SQLite database)
// Let's assume `encryptedBuffer` is the raw buffer you got from the `encrypted_value` column
const decryptedString = morvay.decryptValue(encryptedBuffer, masterKey);

console.log('Decrypted:', decryptedString);

Features

• Extracts master key from Local State seamlessly.
• Handles Chromium v10 and v20 AES-256-GCM decryption.
• Fallback for older DPAPI-only encryptions.

Requirements

• Node.js
• Windows OS (due to DPAPI requirements)