H2 database password recovery

Question

We have thousands of users using H2 database, and sometimes, somehow, someone forgets the password.

Is there a way of recovering, at least, the SA user password?

Of course, i tell them that no one would be happy that this would be possible if the database was stolen...

Anyway, i need to be sure, for all the affected users sake.

Thanks.

score 3 · Accepted Answer · edited May 23 '17 at 12:12

3

No, it is not possible to recover the password of any user, because passwords are not stored in the database file. Instead, the password, together with a random salt, is hashed, and only the hash and the salt are stored. The random salt protects against rainbow attacks. By the way, in the server mode, the password is not transmitted - only the hash is transmitted. See the documentation for details.

However, if the database is not encrypted, the data can be extracted from a database file.

edited May 23 '17 at 12:12

Community

1
1

answered Oct 31 '12 at 08:01

Thomas Mueller

48,905
14
116
132

Thank you, Thomas. Can you point the way to "extract" the database data? Is it a service that you provide? – marcolopes Oct 31 '12 at 21:56
You can open the database file with a text editor. There is also data recovery tool (org.h2.tools.Recover) – Thomas Mueller Nov 01 '12 at 05:23

H2 database password recovery

1 Answers1