Extracting Secrets From the Google Authenticator App

Extracting Secrets from the Android App

If you start to get too many keys on your phone and want to simplify a bit, you can extract the secret from say, your primary gmail key and reuse it with some of our other services (say, SSH). To do that, run this command on rooted phone:

cat /data/data/com.google.android.apps.authenticator/databases/databases

If you feel fancy you can move it to your laptop and use the sqlite command:

sqlite3 ./databases
sqlite> select * from accounts;
1|[email protected]|key|0|0

Or just eyeball it with cat.

Yea, it is not encrypted. In there is the secret that can be inserted into a .google_authenicator file or copied to another phone.