HackBrowserData
On this page

Decrypt & Export Yandex Browser Data

Decrypt and export Yandex Browser data on Windows and macOS, including its custom password and credit-card formats.

HackBrowserData decrypts and exports Yandex Browser data on Windows and macOS. Yandex is Chromium-based, but it uses different database names and an additional encryption layer for saved passwords and credit cards; HackBrowserData handles those formats explicitly.

Warning

For authorized security research and DFIR only. Run it on systems and accounts you own or are explicitly permitted to assess — see About.

What you can extract

All nine Chromium categories are available: password, cookie, bookmark, history, download, creditcard, extension, localstorage, and sessionstorage. See the category matrix.

Commands

bash
# Everything in detected Yandex profiles
hack-browser-data dump --browser yandex

# Saved passwords and credit cards only
hack-browser-data dump --browser yandex --category password,creditcard

yandex is the canonical --browser key. Output is one file per non-empty category — see Output & Data Formats.

Where Yandex stores data

OSUser-data directory
Windows%LOCALAPPDATA%\Yandex\YandexBrowser\User Data
macOS~/Library/Application Support/Yandex/YandexBrowser

Yandex is not registered on Linux in the current release.

What differs from standard Chromium

  • Passwords are stored in Ya Passman Data instead of Login Data.
  • Credit cards are stored in Ya Credit Cards instead of Web Data.
  • Those databases use a Yandex-specific per-database key and authenticated encryption format.
  • Cookies follow the standard Chromium storage and decryption path.
  • Yandex credit-card output can include the cvc and comment fields, which are normally blank for other Chromium browsers.

Caveat: Yandex Master Password

When a Yandex Master Password is set, HackBrowserData still exports saved passwords and credit cards, but without their secrets: logins keep their URL and username, cards their holder name, expiry, and title. The run summary marks both categories partial, with N not recovered. HackBrowserData does not ask for, brute-force, or crack the Master Password. Cookies and the other requested categories export normally.

On macOS, Yandex also needs its browser-specific secret from the login Keychain, so HackBrowserData asks for the current macOS login password. See FAQ & Troubleshooting.

See also