Decrypts an encrypted Bitwarden data.json file (from the desktop App).
You can safely store data.json as an encrypted, offline backup of your vault knowing you will always be able to decrypt it.
To determine the location of the data.json file see:
https://bitwarden.com/help/article/where-is-data-stored-computer/
Note: BitwardenDecrypt does not work with Bitwarden Encrypted JSON Exports.
These exports lack the Protected Symmetric Key needed to decrypt entries.
Outputs JSON containing:
- Logins
- Cards
- Secure Notes
- Identities
- Folders
- Organizations
- Collections
- Sends (Optional)
Note: Outputs (almost) all key/value pairs, including ones you probably don't care about.
./BitwardenDecrypt.py [options] (reads data.json from current directory)
or
./BitwardenDecrypt.py [options] inputfile
Password: (Enter Password)
Options:
--includesends Include Sends in the output.
On Windows:
py BitwardenDecrypt.py [options]
or
py BitwardenDecrypt.py [options] inputfile
Password: (Enter Password)
Options:
--includesends Include Sends in the output.
Note: This script depends on the 'cryptography' package
pip install cryptography
Find this useful? If so, consider showing your appreciation. ๐
https://paypal.me/GurpreetKang
- Does not work with Bitwarden Encrypted JSON Exports.
These exports lack the Protected Symmetric Key needed to decrypt entries. No validation of the CipherString. I.e. No verification of the MAC before decrypting.Now verifies the MAC.- Can only decrypt EncryptionType: 2 (AesCbc256_HmacSha256_B64). At the time of writing this is the default used for all entries in the personal vault.
Does not decrypt anything from a Collection (Organization).
Initial support for decrypting items from a Collection (Organization). This adds support for decrypting EncryptionType: 4 (Rsa2048_OaepSha1_B64)
[ ] Nothing. Hopefully Bitwarden will implement an encrypted export and this script can become obsolete.
This project is licensed under the GNU General Public License v3.0 - see the LICENSE file for details
- Kyle Spearrin for creating Bitwarden.
- Joshua Stein (Rubywarden) for the reverse engineered Bitwarden documentation.
This project is not associated with Bitwarden or Bitwarden, Inc.