| Title: | Decrypt Passwords from Gnome Keyring, Windows Data Protection API and macOS Keychain |
|---|---|
| Description: | Decrypts passwords stored in the Gnome Keyring, macOS Keychain and strings encrypted with the Windows Data Protection API. |
| Authors: | Josh Gilfillan |
| Maintainer: | Josh Gilfillan <[email protected]> |
| License: | MIT + file LICENSE |
| Version: | 0.4.0 |
| Built: | 2024-12-24 06:37:15 UTC |
| Source: | CRAN |
Decrypt passwords encrypted with the Microsoft Data Protection API
decrypt_dpapi_pw(file)decrypt_dpapi_pw(file)
file |
File that holds a password encrypted using DPAPI |
Requires Powershell to be installed and execution policy set to RemoteSigned.
This can be achieved by running
Set-ExecutionPolicy RemoteSigned
from Powershell.
An decrypted password as an invisible string. Invisible means that the password won't be displayed in the console, but can be assigned to a variable or used inline.
## Not run: # First run the command below from Powershell: # Read-Host "PW?" -AsSecureString | ConvertFrom-SecureString | Out-File "C:\Temp\Password.txt" # Now execute the following R commands to decrypt the password and save it in # variable "x". Note that if run without assignment, the password will not # be displayed in the console. Passwords must be saved to a variable or used # inline within a connection string. library("keyringr") x <- decrypt_dpapi_pw("C:\\Temp\\Password.txt") # function is best used in a connection string command: ch <- odbcConnect("some dsn", uid = "user1", pwd = decrypt_dpapi_pw("C:\\Temp\\Password.txt")) ## End(Not run)## Not run: # First run the command below from Powershell: # Read-Host "PW?" -AsSecureString | ConvertFrom-SecureString | Out-File "C:\Temp\Password.txt" # Now execute the following R commands to decrypt the password and save it in # variable "x". Note that if run without assignment, the password will not # be displayed in the console. Passwords must be saved to a variable or used # inline within a connection string. library("keyringr") x <- decrypt_dpapi_pw("C:\\Temp\\Password.txt") # function is best used in a connection string command: ch <- odbcConnect("some dsn", uid = "user1", pwd = decrypt_dpapi_pw("C:\\Temp\\Password.txt")) ## End(Not run)
Get a password from Gnome Keyring using secret-tool
decrypt_gk_pw(key_value_pairs)decrypt_gk_pw(key_value_pairs)
key_value_pairs |
A string of key value pairs as expected by secret-tool |
Requires the Gnome Keyring and secret-tool to be installed.
An decrypted password as an invisible string. Invisible means that the password won't be displayed in the console, but can be assigned to a variable or used inline.
## Not run: # First encrypt a password using secret-tool as follows: # secret-tool store --label=mylabel db mydb user user1 # now return the password above to the R environment x <- decrypt_gk_pw("db mydb user user1") # function is best used in a connection string command: ch <- odbcConnect("some dsn", uid = "user1", pwd = decrypt_gk_pw("db mydb user user1")) ## End(Not run)## Not run: # First encrypt a password using secret-tool as follows: # secret-tool store --label=mylabel db mydb user user1 # now return the password above to the R environment x <- decrypt_gk_pw("db mydb user user1") # function is best used in a connection string command: ch <- odbcConnect("some dsn", uid = "user1", pwd = decrypt_gk_pw("db mydb user user1")) ## End(Not run)
Get a generic password from macOS Keychain using the 'security' cli
decrypt_kc_pw(label, type = "generic")decrypt_kc_pw(label, type = "generic")
label |
Keychain password label |
type |
Leychain password type. Either "generic" or "internet". |
Passwords must be saved in Keychain prior to using the function.
macOS may require the user to grant access to "security" the first time the function is run for each password. It is important to select "Always allow", which will prevent similar dialogs in the future.
Returns a decrypted password as an invisible string. Invisible means that the password won't be displayed in the console, but can be assigned to a variable or used inline.
## Not run: # First store a password in Keychain # now return the password above to the R environment x <- decrypt_kc_pw("label") # function is best used in a connection string command: ch <- odbcConnect("some dsn", uid = "user1", pwd = decrypt_kc_pw("mydb_myuser")) ## End(Not run)## Not run: # First store a password in Keychain # now return the password above to the R environment x <- decrypt_kc_pw("label") # function is best used in a connection string command: ch <- odbcConnect("some dsn", uid = "user1", pwd = decrypt_kc_pw("mydb_myuser")) ## End(Not run)
Get a account name from macOS Keychain using the 'security' cli
get_kc_account(label, type = "generic")get_kc_account(label, type = "generic")
label |
Keychain password label |
type |
Leychain password type. Either "generic" or "internet". |
Returns the account value attached to the label.
macOS may require the user to grant access to "security" the first time the function is run for each stored credential. It is important to select "Always allow", which will prevent similar dialogs in the future.
## Not run: # First store a set of credentials in Keychain # now return the account name to the R environment x <- get_kc_account("label") ## End(Not run)## Not run: # First store a set of credentials in Keychain # now return the account name to the R environment x <- get_kc_account("label") ## End(Not run)