HackBrowserData

Decrypt & Export Yandex Browser Data

Decrypt and export Yandex Browser data on Windows and macOS, including its custom password and credit-card formats.

HackBrowserData decrypts and exports Yandex Browser data on Windows and macOS. Yandex is Chromium-based, but it uses different database names and an additional encryption layer for saved passwords and credit cards; HackBrowserData handles those formats explicitly.

Warning

For authorized security research and DFIR only. Run it on systems and accounts you own or are explicitly permitted to assess — see About .

What you can extract

All nine Chromium categories are available: password, cookie, bookmark, history, download, creditcard, extension, localstorage, and sessionstorage. See the category matrix .

Commands

bash
# Everything in detected Yandex profiles
hack-browser-data dump --browser yandex

# Saved passwords and credit cards only
hack-browser-data dump --browser yandex --category password,creditcard

yandex is the canonical --browser key. Output is one file per non-empty category — see Output & Data Formats .

Where Yandex stores data

OSUser-data directory
Windows%LOCALAPPDATA%\Yandex\YandexBrowser\User Data
macOS~/Library/Application Support/Yandex/YandexBrowser

Yandex is not registered on Linux in the current release.

What differs from standard Chromium

  • Passwords are stored in Ya Passman Data instead of Login Data.
  • Credit cards are stored in Ya Credit Cards instead of Web Data.
  • Those databases use a Yandex-specific per-database key and authenticated encryption format.
  • Cookies follow the standard Chromium storage and decryption path.
  • Yandex credit-card output can include the cvc and comment fields, which are normally blank for other Chromium browsers.

Caveat: Yandex Master Password

When Yandex Master Password protects the saved-password database, HackBrowserData skips those protected password records. It does not ask for, brute-force, or crack the Master Password. Credit cards and the other requested categories can still export when their corresponding data is not protected by that password.

On macOS, Yandex also needs its browser-specific secret from the login Keychain, so HackBrowserData asks for the current macOS login password. See FAQ & Troubleshooting .

See also