Bug Days

DBeaver Password Decrypter

DBeaver 6.1.3+ (credentials-config.json)

1. Locate credentials-config.json:

  • Mac: ~/Library/DBeaverData/workspace6/General/.dbeaver/credentials-config.json
  • Windows: %APPDATA%\DBeaverData\workspace6\General\.dbeaver\credentials-config.json
  • Linux: ~/.local/share/DBeaverData/workspace6/General/.dbeaver/credentials-config.json

2. Upload the file below to decrypt:

3. Correlate with data-sources.json in the same folder to find connection details.

Alternative: OpenSSL Command Line Method

You can also decrypt the credentials file using OpenSSL directly from the command line:

macOS

openssl aes-128-cbc -d \
  -K babb4a9f774ab853c96c2d653dfe544a \
  -iv 00000000000000000000000000000000 \
  -in "$HOME/Library/DBeaverData/workspace6/General/.dbeaver/credentials-config.json" | \
  dd bs=1 skip=16 2>/dev/null

Linux

openssl aes-128-cbc -d \
  -K babb4a9f774ab853c96c2d653dfe544a \
  -iv 00000000000000000000000000000000 \
  -in ~/.local/share/DBeaverData/workspace6/General/.dbeaver/credentials-config.json | \
  dd bs=1 skip=16 2>/dev/null

Generic (any file path)

openssl aes-128-cbc -d \
  -K babb4a9f774ab853c96c2d653dfe544a \
  -iv 00000000000000000000000000000000 \
  -in credentials-config.json | \
  dd bs=1 skip=16 2>/dev/null

How was the key derived?

The key babb4a9f774ab853c96c2d653dfe544a comes from DBeaver's source code, converted to hexadecimal: 

# Python
import struct
struct.pack('<16b', -70, -69, 74, -97, 119, 74, -72, 83, -55, 108, 45, 101, 61, -2, 84, 74).hex()
# Output: 'babb4a9f774ab853c96c2d653dfe544a'
Old DBeaver (Pre 6.1.3) - Text Decryption ▾

1. Locate .dbeaver-data-sources.xml:

  • DBeaver 6.0.3: ~/.dbeaver4/General/.dbeaver-data-sources.xml
  • Older: ~/.dbeaver/General/.dbeaver-data-sources.xml

2. Find encrypted password and paste below:

If this helped you, I'd appreciate a 👍 on my Stack Overflow answer

DBeaver Password Decryption Tool

Decrypt passwords saved in DBeaver. All decryption happens locally in your browser - no data is sent to any server.