Recover Plaintext Password from Qlik DB

[justindallasverizon]

Hello Folks,

Is there a way to recover the plaintext password from the backing Qlik database?

Any help is greatly appreciated.

[SivenM2020]

You can find the qliksenserepository database user password using the Connection String Editor which is included in the Qlik Sense diagnostic tools.

To open the Connection String Editor:

Navigate to C:\Program Files\Qlik\Sense\Repository\Util\QlikSenseUtil and double-click the QlikSenseUtil.exe file.
In the LogOnForm screen, enter the database user and password that you used during the Qlik Sense installation.
In the Diagnostics Tool, click the Connection String Editor tab.
In the Connection String Editor click Read to see the encrypted connection string.

[howdash]

If you don’t have the database user password, you can still find the password. It’s stored in encrypted repository config files.

I’ve put together an article on LinkedIn showing where to find the config file and how to decrypt it. Here’s the article:

https://www.linkedin.com/pulse/decrypt-encrypted-data-config-files-howdashllc-zchle?utm_source=share... 

and here’s the corresponding video if you’d like to see how that’s done:

https://youtu.be/PXr876mnIec?si=KBkmWEAaSBPTipbn 

[hugo_andrade]

Hey @justindallasverizon ,

Qlik Sense server has a tool that you can use to retrieve this password.

Go to C:\Program Files\Qlik\Sense\Repository\Util\QlikSenseUtil\ and run as administrator the QlikSenseUtil.exe program. 

Click on the Connection String Editor, then click on Read.

You will see the password within the box enclosed by single quotes.

If you have lost the superuser password, you can change it using the method outlined on this Qlik article: How to reset forgotten PostgreSQL password in Qlik... - Qlik Community - 1712725.

If this helps you, please leave a like and mark this answer as the solution.

Thanks!

[justindallasverizon]

Hello Siven,

I'm attempting to recover a password of a connection, not the qliksenserepository password.

[hugo_andrade]

HA! Got it.

That password is encrypted using Qlik Sense’s internal certificates.

I haven’t attempted to decrypt it before, and I’d strongly advise against going down that path. It can easily be interpreted as an abuse of privilege.

I understand the need, but my recommendation is to avoid trying to extract it. Instead, have the DBA team or whoever manages the source system reset it for you.

[RafaelBarrios]

Hi @justindallasverizon 

No, you can't because they're encrypted using certificates.

Just guessing, I'm going to assume you did a server migration, am i right?
if so, it could be a way to make it work.

Best,