Is there any way to extract credentials saved by TortoiseSVN?
Share
Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
Short answer: You can use TortoiseSVN Password Decrypter to easily display your cached credentials, including passwords.
Long answer: Here’s how the tool works.
The credentials are saved in subdirectories of
%APPDATA%\Subversion\auth\. Listed from this previous answer they are:svn.simplecontains credentials for basic authentication (username/password)svn.ssl.servercontains SSL server certificatessvn.usernamecontains credentials for username-only authentication (no password needed)The first directory is the one of interest. It appears to contain files with names that look like GUIDs; one for each repository for which you’ve saved credentials.
The passwords in these files are encrypted by the Windows Data Protection API. The tool above uses sample code from Obviex to interface with this API and perform decryption.
In order for it to work, you must have access to the same Windows user account you were running under when you checkmarked the “Save authentication” checkbox. This is because the Windows Data Protection API uses an encryption key that is tied to your Windows account. If you lose this account (or, I believe, if an administrator resets your password) then you will no longer be able to decrypt the passwords (except perhaps by using brute force / a third party tool). Having a new Windows account with the same username/password (or probably even SID’s) is not sufficient.