Page 1 of 1

Password invisible

Posted: Sunday 11 October 2020 13:28
by PaulPijpers
Hi there,

I am new on this forum and have a question.
I am running Domoticz on a raspberry pi.
In the settings in Domoticz there is an issue called: website protection.
The password is very long and invisible.
Is it possible to make it visible.
Is it possible to change it?

Paul

Re: Password invisible

Posted: Sunday 11 October 2020 16:26
by FlyingDomotic
To get the password back, you have to go to the SQLite DB, table "Preferences", and get the value of 'WebPassword" item. It's base64 encoded, you will find lot of Web site to translate this to something more human readable (unless you currently speak base64 ;-)

Re: Password invisible

Posted: Sunday 11 October 2020 18:02
by erem
go to the setup page using google chrome.
right click the field and use inspect
right click the element and change

Code: Select all

<input type="password" id="WebPassword" name="WebPassword" style="width: 200px; padding: .2em;" class="text ui-widget-content ui-corner-all">
into

Code: Select all

<input type="text" id="WebPassword" name="WebPassword" style="width: 200px; padding: .2em;" class="text ui-widget-content ui-corner-all">
this will expose the password

Re: Password invisible

Posted: Sunday 11 October 2020 18:31
by PaulPijpers
Hi Erem,

Thanks a lot, this was really helpful.
I managed to make all these asterixes visible in real words.

But nevertheless, I can not remember when I inputted this passwords?

What happened, and can I change it?

Paul

Re: Password invisible

Posted: Sunday 11 October 2020 21:26
by FlyingDomotic
You can change the password with Domoticz interface, "setup" > "settings".

You can also change it into SQLite database, after encoding the "clear" password into base64 (using, for example, https://www.base64decode.org/)

Re: Password invisible

Posted: Sunday 11 October 2020 22:01
by PaulPijpers
Hi,

With this decoder I managed to understand some of the presented passwords in Domoticz.
I could recognize my self set password on my mydomiticz site :)

But it is not possible to decode the password for site protection, it says: malfuntion code in the Base 64 decoder.

Should I be worried about that, do I need this password?

Re: Password invisible

Posted: Monday 12 October 2020 10:58
by FlyingDomotic
Hi,

Sorry, I was wrong telling that the WebSite password was (only) base64 encoded. After reading Domoticz's code, it seems that Web site, security, protection and users' passwords are base64 encoded then MD5 hashed. There's no way to decode them (even if you can find on (dark) Internet some sites to get an equivalent passphrase to the MD5 hash, not necessary the same as you enter, but one giving the same MD5 hash).

The simple way to fix that is to overwrite the password, changing it with Domoticz interface.

Re: Password invisible

Posted: Monday 12 October 2020 20:46
by PaulPijpers
Thanks FlyingDomotic,

This makes a lot clear to me.
But, if I change the password in settings, it jumps back again to the original.
On the other side, do I need this password?

Paul

Re: Password invisible

Posted: Monday 12 October 2020 22:16
by FlyingDomotic
Strange, I changed it few times w/o problem.

Reading the code, you can set both user and password to empty values (clear them).

I imagine that you set the local networks to include the address/network of the machine you use to change settings?

Re: Password invisible

Posted: Tuesday 13 October 2020 10:23
by FlyingDomotic
Looking for something else, I found this on Domoticz's wiki :

Resetting the Website Username/Password

To reset the website username/password in case this is lost there are two options.
  • Specify –nowwwpwd as command line argument
  • Place a file labeled ‘resetpwd’ inside the root Domoticz installation folder.
Each minute the existence of this file is checked, and if found the Username/Password is reset and the file is removed.

Re: Password

Posted: Saturday 30 January 2021 9:54
by michelgoujon
Hello,
I'm newcomer even since already registered under "... goujon ..." with mailing address "[email protected]". But credentials aren't anymore in hand ...
My problem is "I have a domoticz running on my RPI 3 - but I lost credentials ..."
Is there a method to recover without going through the all process ?
Or do I have to re-install ?
Thank for your help !
Michel Goujon
[email protected]

Problem is solved ... just reading the doc ! "-nowwwpwd (in case you forgot the webserver username/password)"