Password invisible

[PaulPijpers]

Hi there,

I am new on this forum and have a question.
I am running Domoticz on a raspberry pi.
In the settings in Domoticz there is an issue called: website protection.
The password is very long and invisible.
Is it possible to make it visible.
Is it possible to change it?

Paul

[FlyingDomotic]

To get the password back, you have to go to the SQLite DB, table "Preferences", and get the value of 'WebPassword" item. It's base64 encoded, you will find lot of Web site to translate this to something more human readable (unless you currently speak base64

[erem]

go to the setup page using google chrome.
right click the field and use inspect
right click the element and change

Code: Select all

<input type="password" id="WebPassword" name="WebPassword" style="width: 200px; padding: .2em;" class="text ui-widget-content ui-corner-all">

into

Code: Select all

<input type="text" id="WebPassword" name="WebPassword" style="width: 200px; padding: .2em;" class="text ui-widget-content ui-corner-all">

this will expose the password

[PaulPijpers]

Hi Erem,

Thanks a lot, this was really helpful.
I managed to make all these asterixes visible in real words.

But nevertheless, I can not remember when I inputted this passwords?

What happened, and can I change it?

Paul

[FlyingDomotic]

You can change the password with Domoticz interface, "setup" > "settings".

You can also change it into SQLite database, after encoding the "clear" password into base64 (using, for example, https://www.base64decode.org/)

[PaulPijpers]

Hi,

With this decoder I managed to understand some of the presented passwords in Domoticz.
I could recognize my self set password on my mydomiticz site

But it is not possible to decode the password for site protection, it says: malfuntion code in the Base 64 decoder.

Should I be worried about that, do I need this password?

[FlyingDomotic]

Hi,

Sorry, I was wrong telling that the WebSite password was (only) base64 encoded. After reading Domoticz's code, it seems that Web site, security, protection and users' passwords are base64 encoded then MD5 hashed. There's no way to decode them (even if you can find on (dark) Internet some sites to get an equivalent passphrase to the MD5 hash, not necessary the same as you enter, but one giving the same MD5 hash).

The simple way to fix that is to overwrite the password, changing it with Domoticz interface.

[PaulPijpers]

Thanks FlyingDomotic,

This makes a lot clear to me.
But, if I change the password in settings, it jumps back again to the original.
On the other side, do I need this password?

Paul

[FlyingDomotic]

Strange, I changed it few times w/o problem.

Reading the code, you can set both user and password to empty values (clear them).

I imagine that you set the local networks to include the address/network of the machine you use to change settings?

[FlyingDomotic]

Looking for something else, I found this on Domoticz's wiki :

Resetting the Website Username/Password

To reset the website username/password in case this is lost there are two options.

• Specify –nowwwpwd as command line argument

• Place a file labeled ‘resetpwd’ inside the root Domoticz installation folder.

Each minute the existence of this file is checked, and if found the Username/Password is reset and the file is removed.

[michelgoujon]

Hello,
I'm newcomer even since already registered under "... goujon ..." with mailing address "[email protected]". But credentials aren't anymore in hand ...
My problem is "I have a domoticz running on my RPI 3 - but I lost credentials ..."
Is there a method to recover without going through the all process ?
Or do I have to re-install ?
Thank for your help !
Michel Goujon
[email protected]

Problem is solved ... just reading the doc ! "-nowwwpwd (in case you forgot the webserver username/password)"