08 Aug 2012

How to use an old password on Google or GMail to get your lost Android phone back. (Updated Script 11/18/2014)

Tips & Tricks 72 Comments

SockerBallsI’ve come to really enjoy going to live soccer games, and late in July my wife got us some great seats to FC Dallas versus the LA Galaxy! We had a great time. We had a designated driver so sampled various micro-brews and cheered for Dallas. They lost but we had a wonderful time.

Because of the gusto with which we sampled the various brews, I never noticed I had lost my phone until the next morning as we prepared to go out of town. I was convinced I had left my phone in our friends car, so we left for several days. They couldn’t find my phone in their car so immediately began resetting my passwords, starting with Google.

If you’ve lost your phone and didn’t have any tracking software on it, you may be aware of tools like Plan B or AndroidLost. After my last factory reset, I forgot to put tracking software back on my phone or even set a lock.

And thus, in my effort to secure my identity and accounts, I had locked myself out of my phone. With a new Google password, I couldn’t go to Google Play and push Plan B or anything to my phone. And Google doesn’t allow you to use old passwords, so I couldn’t set it back.

Sorry, but this would not do. And so – here’s the story of how I reset my Google password back to an old password, found my phone, and got it back.

Androidlost

Lesson 1: Lesson1_Lock_phone

Before you lose your phone, install tracking software. Period.  I used AndroidLost. Install it, enable Admin Rights. Scan the QR code you see to get started.

Then, I would encourage you to donate a few bucks to the team that wrote it. You don’t have to, but if you use it to get your phone back, you will anyway. Donating ahead of time will make the software better.

Then go to AndroidLost.com, login with your Google account, and check it out.

You’ll thank me, and AndroidLost, if you have to use this software. AndroidLost doesn’t poll a server but like many other solutions it is managed via SMS and so battery drain and data usage should be minimal.  Also, check out Lookout software’s Plan B. It, too, can be a lifesaver.

Learn from my mistake. Lesson 1 – install recovery software before you lose your phone.

 

Dang, I didn’t follow my own Lesson 1, so Lesson 2:

First, don’t panic. Before you change your Google password, read Lesson 3.challenge_accepted_boss

Mine was almost a worst case scenario. I had no security on my phone and have several ancillary accounts are associated with my Google account.  My first reaction was to change my password. Which is good until you try and change it back to your old one.  Via Google Play, you can install apps like AndroidLost and Plan B to your phone. There’s catch, though, in that you can only do this if its login is still valid or you haven’t changed your Google password.  I’d done the later, so my phone was somewhere with no tracking software, no passcode, and no way for me to touch it.

A quick search showed a LOT of people unhappy that Google won’t allow password reuse. More digging uncovered references to 100 remembered passwords. The general consensus in the support forums is “Too bad for you, you should have known better. Better luck next time!”  The IT pro in me knows that this is the right approach. It’s just better and more secure that way.

I can’t reuse my old Google password until I change my password 100 more times? Challenge accepted, like a boss.

It’s funny how you go back to the basics when the SHTF.  In this case, I retreated to a tools I had used in various capacities for years. VBScript and the spectacular windows automation tool AutoIT.  For reference, the editor I use for VBScript is VBSEdit. There are many other editors, but this one is mine. It builds scripts into executables, too.

So, if you’re going to use this you have to install AutoIT. Install it all, including the COM objects.  Next, you might be on a 64bit machine and running VBScripts on 64bit machines vs 32bit machines can be kludgy.  Start by clicking here if you have issues. Lastly, I use Chrome. It’s really moot, but this script is written to use Chrome.

I make no guarantees that this script will work for you. Use this script at your own risk. If you do not feel comfortable with solving any of the issues I reference here, DO NOT USE THIS. Don’t download it, don’t run it, don’t do anything with it. You could lock yourself out of your Google account. If you are crazy enough to try this, make SURE you have recovery options setup for your Google account and that you can use them.

That being said, here’s the script.  Read the comments carefully. Close everything else before running it. Do not touch your computer or move your mouse or click on any windows while this is running.  The reason being is this is automating windows and sending keystrokes to the active window (in this case, Chrome). It takes a while to run, so give it time. Run the script from a prompt so when it terminates the output is still visible. I strongly recommend this in case of any problems.

Updated to version 1.8 – see script comments for details  – Script is also available on GitHub here.

If you understand the risks, check this box to see the script:

scaredBasically – the script opens Chrome, logs in as you, and begins to change your password 99 times. It logs in, changes your password, logs out, and repeats. It adds numbers to the end of your current password. After that, it resets the password a final time to the old password.

I created a test Google account to make sure the script ran as I wanted before doing this on my real account. I recommend doing this so you’ll know what to expect. Don’t forget to setup your recovery options on your test account. A handy thing about this is the test account can be the recovery account for your primary account.

One more thing, this script outputs the password is setting the account to. If it is interrupted for any reason you can examine the output to determine what the current password on the account is. You should use the recovery option, but if you are like me and can get into Ready, Fire, Aim mode – check the output for the current password. You can then edit the script, and start it over.

Lesson 2 is where there’s a will, there’s a way; especially if the will stems from paranoia and OCD. Oh, and that yes, it is true: if you change your password 100 times Google will forget your old password and let you use it again.

Lesson 3:

ChecklistOk, so your Google password is the same password that your account is set to on your Android phone.  I’m writing this in August of 2012. If you are from the future and play has changed, you’ll have to figure it out how to remotely install apps.  None of this will take effect until the Phone is on.  See Afterthoughts on this, but remember when the phone connects uninstalls will take place but not installs. I had told Play to install PlanB and AndroidLost and when the phone finally came online the apps did not install. This is an important thing to remember.

Go directly to http://play.google.com and login.

Go to “My Android Apps”.

Pick your lost phone.

Verify what is on it. You might want to remove apps that have personal data or information in them. If you use a 3rd party browser and cache passwords, for example. Or the Facebook and Twitter apps. Or maybe the Gmail app.

Next, Search for AndroidLost.

Click Install.

Hopefully, it is compatible with your device. Next to Send To… select your wayward Android device. Click Install.

Next, search for PlanB. Repeat the process and install PlanB.

PlanB will start emailing you it’s best guess as to the location of your phone. The better the signal where it is, the more accurate it will be.

Next, you will want to send SMS (text) messages to your phone. Don’t have another phone? You can use a friends or do what I did.

Head over the Google Voice. Setup an account. With Google Voice, you can send SMS messages.  These apps will text you back, acknowledging your commands.  See their websites for a list of commands. You can secure the commands to require a pin code or restrict what numbers can text commands to these (Parents, are you listening? With these tools, you can get a GPS location of where your kids are, snap pictures, and record audio.)

pinpoint_phoneBoth AndroidLost and PlanB monitor incoming SMS messages for commands. For AndroidLost you have to tell your phone to launch the app.  The phone takes it’s ID from your profile (see Dashboard in Afterthoughts) and matches up to your Google login on AndroidLost.com.

From there, via AndroidLost you can turn on the GPS (doesn’t work on all phones), pop up messages, take pictures, record audio, make your phone say things, and all sorts of useful tools to help find your phone. You can kick off an alarm for 30 seconds to find it in the couch cushions.  You can also, and this sort of works, start a web server on your phone and retrieve files from your SDCard (if you’re phone is rooted, maybe more?).

You’ll want to monitor your Gmail Account for details as your phone begins to respond.

If you followed Lesson1, you can self destruct your phone or lock it. (See Afterthoughts)

Lesson 3 is remotely installing apps on your phone works, but your options are limited because you didn’t follow lesson 1.

No Luck:

Roll_DiceI gambled.

If you can’t get your phone back – make sure you call your carrier and kill it. YOU are responsible for any charges to your account made by whoever steals or finds your phone.

I chose to leave my phone active and wait for it to come online. When I lost it, the battery was almost dead. On Sprint, I could see they made one call the day after they found it. It was almost 8 days later before my phone came online again. I think they had to find a charger for it.  Either way, do this at your own risk.

No lesson, just a bit of free advice. THINK about the risks before you act or don’t act. Only you know what’s best for you. My decision to not immediately deactivate the phone was risky and some may say stupid. The guy who found it made some international calls and I will have to pay for them. For me, though, it was worth it.

Some afterthoughts

E-book reader with colorful papersI was texting my phone like a mad man begging the person to reply to my texts so I could get my phone back. I was offering a reward, begging, you name it. (BTW, I don’t recommend you threaten) They never responded. Because they didn’t speak English! Consider using Google translate to text multilingual messages. The guy who found my phone couldn’t speak or read English. Granted, he didn’t ask anyone to translate it, but he also didn’t know I was offering him $100 to let me know where my phone was.

Never go alone to get your phone from a stranger, especially you ladies. The holder of your phone may know quite a bit about you. If the finder will meet you with the phone, meet in a well lit crowded public place. Be careful.

How do you know if your phone is online? Via your Google Dashboard.  Login to your Google account, go the dashboard, scroll down to the section titled Android Devices. There, you will see your phone(s) or tablet(s). Click More Data Stored About this Device. In a pop-up window, Google kindly gives you the MEID, Registration Date, and most importantly the Last Activity Seen on. That last bit of information is the last time your phone or tablet was powered on and successfully connected to Google. There’s not guarantee the phone is still on, but if the time stamp is very recent you might get lucky. I did. Remember, though, if you changed your password your phone can’t connect. If it shows only a time, that means the device has connected today. In my case, after 8 days, the phone powered on around 11:45 AM yesterday. I check it about 3 hours later and recovery began in earnest.

Lock your device with a PIN or a Pattern. As a developer, I got lazy having to unlock my phone all the time. Lesson learned.

Install recovery software on your devices ahead of time. It may cost you battery life and maybe a little more data usage, but with EMAIL, online banking, Amazon, and pizza ordering available via your phone it’s important to protect your identity, credit, and savings. If the wrong person had found my phone they could have done a password recovery and gotten who knows what information.

Consider using non-system based email apps.  By default, there’s an email client on your phone. You can use this for Gmail, Exchange, you name it, BUT YOU CANNOT REMOTELY REMOVE IT AND ITS DATA VIA GOOGLE PLAY. In my opinion, this is a huge oversight on the part of the carriers / Google / manufacturers. In my instance, I had an Exchange account associated setup on the default mail client on my phone. I used the GMail app for Gmail. Via Google Play, I told my phone to uninstall Gmail and delete all the data. The next time my phone came up it was told by Play to delete Gmail off the phone and all my emails. I couldn’t do this with the system app.  So as a thought, always consider using a 3rd party app if the app will have personal or sensitive information within it.

If you get a brand new phone, before you do anything install these apps on the phone and play with them. Learn how to erase your SDCard or remotely lock / unlock your phone. Know what its capabilities are.  Make your phone “self destruct” before you do anything with it. A self destruct just wipes all personal data off the phone, or factory resets it. So if it’s a brand new phone, I suspect a factory reset won’t do anything but you should carefully read what each recovery app does and what resetting it may do to your phone.

cloud_sync

Consider using something like DropBox or Google Drive to automatically push data from your device to the cloud.  For pictures, you might also consider setting up a Google+ account! When you install the Google+ app, you get the option automatically upload your pictures to your G+ profile. They are not shared with anyone by default, but it will save a copy for you. This can be invaluable not only for protecting your files but also for when someone says “Hey, send me copies of the pictures you took at that party!”.   If you setup a Google+ account, you can find me at http://inzi.com/plus.

I was lucky, but I didn’t sleep at all last night. If you are here because you lost your phone and are trying to get it back, I feel for you and I hope you get it back.

If this script helped you, perhaps consider tossing me a tip via PayPal.  I donated $10 USD to AndroidLost.  It’s not much, but after coughing up a reward for my phone I’m eating Tuna and Ramen noodles for the rest of the month.

Smile

72 Responses to “How to use an old password on Google or GMail to get your lost Android phone back. (Updated Script 11/18/2014)”

  1. Yoel Gabay says:

    Hi, your article is great but I am uclear on how to run the script. I downloaded AUto IT and I see your script. I copied and pasted the script, made the changes and then tried running it and i got the following error Error: Unterminated String. PLease help me.

    Thanks!

    • marble68 says:

      Yoel, what line number?

    • marble68 says:

      Also – if your password has a quote in it, you’ll need to represent that as double quotes like this:

      mypassword = “MyQuoteContaining””password”

    • marble68 says:

      Another key thing is all you do is install AutoIT. You don’t actually run this script within AutoIT. Instead, it is a normal windows VB Script. Hope that helps.

  2. Max says:

    Hi

    I’m trying to run this script but I don’t know how to open the .vbs file with AutoIT, or convert it to .au3

    What am I missing?

    • marble68 says:

      Hi Max!

      Once you’ve installed AutoIT, you simply have to run the VBS file like any other visual basic script.

      • Max says:

        Then how does AutoIT come into play? If I try and run it in a command line I get an error, and if I try and double click the vbs file I get an error.

      • Max says:

        I get

        Unterminated string

        errors. It’s trying to run, for example, your comments in the code, such as ‘Declare Variables & Objects

        I tried deleting all the commentary but then I get other errors, so I’m sure it must be something I’m doing wrong from the start.

    • marble68 says:

      Ok, sorry for the slow reply.

      First, make sure you have done a complete install of AutoIT. This script uses it’s ActiveX controls.

      Some info on that is here: http://www.autoitscript.com/forum/forum/14-activexcom-help-and-support-autoitx/

      Next, if you are on a 64 bit OS, VBS may be using the wrong cscript / wscript executable.

      http://stackoverflow.com/questions/2806584/how-do-i-run-a-vbscript-in-32-bit-mode-on-a-64-bit-machine

      Because AutoIT is using COM, you may need to try 32bit if you’re on a 64bit OS.

      I just copied the whole script, top to bottom, and pasted that into notepad. Then I saved that as test.vbs. Then, I closed all programs and opened a DOS prompt. Then I ran test.vbs.

      I have it associated with cscript, but you may have to specify it. here’s how:
      http://technet.microsoft.com/en-us/library/bb490887.aspx

      I am not sure what Unterminated String you are getting. I need to know the line number.

      Make sure you properly close quotes. Here is some hopefully helpful tips on how to make sure it’s done correctly.
      http://www.computerperformance.co.uk/Logon/code/code_800A0409.htm

      One thing you should watch out for is your browser font. It may be replacing quotes with quote in / quote out instead of generic double quotes.

      I’ve zipped the script and you can get it here: http://inzi.com/?attachment_id=643

      • Max says:

        Thanks for all the effort to help. Sorry for my own late reply. I don’t get notified when there is a reply so I have to check this thread manually.

        I restored default associations for .vbs files, run from cmd, and the error I get is this:

        Script: C:\Users\Username\Desktop\googlepwreset.vbs
        Line: 50
        Char: 1
        Fail: The specified file was not found.
        Code: 80070002
        Source: (null)

        These were translated from Danish, so they might not be perfect but the info should be solid. Does it matter that my system is in Danish? It’s 32-bit Vista.

  3. Max says:

    Any ideas?

    • helperdude says:

      Max:

      Line 50 is the path to chrome.exe, you need to modify this. Easiest way is to right click the chrome icon on your desktop and copy the path to the .exe

  4. Grace says:

    Hi this is incredibly useful, but I have one extra problem: I hastily changed my gmail password as soon as my phone was stolen, as you did, but when I tried to change it back, google informed me that the previous password is now considered too weak!! (Google must have tightened up their password regulations after I made that password) So even though I manually changed the password 100 times, when I tried to revert back to my original password, google didn’t allow me to, on the grounds of it being too weak. I don’t suppose you would have any idea what I could do now? It is heartbreaking because my handbag was also stolen and it has things in it which just can’t be replaced 🙁

    • Marble68_2 says:

      Ouch. That I don’t think I can help you with. Frankly, I’m surprised Google didn’t force you to update your password.

      I wish I could help you with that.

  5. chaitali says:

    hi
    Its working !!
    i got my old password back

    but i didnt understood how and where to send sms as the sim is not active or its not responding

    please help

    • Marble68_2 says:

      The SMS commands are done with Android Lost (or whatever tool you use)… This script is only to get your password back.

  6. chaitali says:

    how to send sms when sim card is not active

  7. Teemu says:

    “Fail: The specified file was not found.” This error means Chrome executable was not found. You can edit the script and change this:

    ChromeEXE = “C:\Users\username\AppData\Local\Google\Chrome\Application\chrome.exe” ‘ Where is the Chrome executable? Replace this with its location.

    To this if using 32-bit Windows:

    ChromeEXE = “C:\Progra~1\Google\Chrome\Application\chrome.exe” ‘ Where is the Chrome executable? Replace this with its location.

    Or if you are using 64-bit Windows, to this:

    ChromeEXE = “C:\Progra~2\Google\Chrome\Application\chrome.exe” ‘ Where is the Chrome executable? Replace this with its location.

    Also Google’s password changing page has been altered slightly so the script doesn’t work at the moment.

    This has to be modified so it presses TAB key twice after entering old password:

    GLogin sUN, tCurPw
    GEditPW
    oAutoIt.Send tCurPw & “{TAB}”

    Should be changed to this:

    GLogin sUN, tCurPw
    GEditPW
    oAutoIt.Send tCurPw & “{TAB}{TAB}”

    Thanks for the script, it worked for me!

    • Marble68_2 says:

      Thanks Teemu!

    • DevilMind says:

      Script: E:\googlepwreset\googlepwreset.vbs
      Line: 50
      Char: 1
      Fail: The specified file was not found.
      Code: 80070002
      Source: (null)

      im am getting this error on both WinXp sp3 32-bit & Win7 sp1 64-bit

      i have added find target
      “C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe”

      but i still get this above error 🙁

      • moccor says:

        I have this same problem. Any help would be appreciated

      • marble68 says:

        I would copy and paste the value you are assigning at line 36 into your run menu and make sure it launches chrome.

        Another might UAC. Maybe you need to run the script as administrator?

  8. Cartez says:

    Well, just do the password reset for 100x times manually! i dont think the phone will be automatically sync with the gmail, how about this problem?

    • marble68 says:

      Yes, you can absolutely reset your password 100 times manually. You don’t need this script to do that.

  9. erf says:

    change your gmail pass for more than 100 times. it take about half an hour and then you can switch to the old one.worked for me. very very annoying and unnessecary (((

  10. marble68 says:

    That’s really all this script does. It uses AutoIT to change your password 100 times.
    It can save you some time.

  11. Victor says:

    I’m pulling an error “xxx.vbs(69, 27) Microsoft VBScript compilation error: Invalid character” Any help would be appreciated. Thanks guys

    • marble68 says:

      line 69 is where it passes the password; there may conflicts between strong characters in your password old password.

      If you’ve already changed your password, you might choose something simple, let it do the 100 resets, then manually reset to your old, complex password.

      • Victor says:

        So my understanding is that the variable (newpassword – which is the old password that was changed) is the one causing the error, correct?

        The only characters in the both password are letters (capital and small), and numbers. That’s it. I changed it but I am still getting that error.

        I appreciate the quick reply and hope you can help me further with this.

    • marble68 says:

      If you don’t have any special characters, that’s unusual.

      Did you maybe save the file as unicode or something? Basically, make sure the quotes are ASCII quotes.

      Do you see any output or does it immediately error? As in, do you see the text “Entering Loop” before the error?

      If you don’t, make sure all previous quote edits are “closed” properly?

      Can you please reply with the code on the line number generating the error? I need to make sure your copy’s line 69 is the same as mine.

      In mine, line 69 reads:
      oAutoIt.Send tCurPw & “{TAB}”

      • Victor says:

        I actually downloaded the code that you had in the archive above and only changed the email and password and chrome path.

        I am on windows 64-bit, but am running the 32-bit version of DOS (in the SysWoW64 folder). I tried both running the script directly as “test.vbs” and also as “cscript test.vbs”.

        Both generate the same error, I do not get any other output. The output I have is as follows:

        Microsoft (R) Windows Script Host Version 5.8
        Copyright (C) Microsoft Corporation. All rights reserved.

        xxxx:\\test.vbs(69, 27) Microsoft VBScript compilation error: Invalid character

        And that’s all I get when I try to run the program.

        My lines are as follows:
        68 GEditPW
        69 oAutoIt.Send tCurPw & “{TAB}”
        70 oAutoIt.Sleep 250

        I have verified all quotes and they are closed correctly with no additional spaces on either end.

        I hope this is enough information. I really appreciate the time you are taking to help.

    • marble68 says:

      Modify it like this:
      68 GEditPW
      69 sTempSendString = tCurPw & “{TAB}”
      70 oAutoIt.Send sTempSendString
      71 oAutoIt.Sleep 250

      Lets see if we get the error on 69 or 70 this time.

      • Victor says:

        I’ve modified it and it is giving me the same result. So I am not sure what is happening there.

    • marble68 says:

      I’ve sent you an email, Victor.

  12. Jim says:

    I just tried the script and followed your instructions above It runs but it cannot change the password on the account. There appears to be a problem with where the passwords are entered. The script will start putting the password in the email user name field after one or two loops. I am on Win7 64 and used the modified run and script commands you referenced.

    A faster way is maybe to keep the Account window open and change the password while still logged in and without logging out.

    Thanks.

    • marble68 says:

      This script is a little old, the UI may be changing? Another possibility is the page isn’t updating fast enough.

      I think I tried doing it on the Account window and it didn’t work, which is why I had to go through the whole process of logging in and out. The best I can remember, it had something to do with the password being updated consistently when logging out.

      Try increases the wait times where you see oAutoIT.Sleep. That is in ms, so try increasing it to 500ms where it is 250, 3500 where it is 2000, and 5000ms where it is 3000.

  13. marble68 says:

    Hi Jim –

    I’ve updated the script so you can tweak the speed at which it types. What you describe can happen if the page is still loading and the script starts typing.

    It’s not smart enough to know to wait for the page to load. Try adjusting the variable iSlowConnectionFactor to something higher than 1.

    Maybe 1.5 or even 2 (to wait twice as long before doing anything).

    The slower it runs, the more accurate it should be.

    One last thing to check is line 109. After it goes to the edit password page, Chrome should autofocus on the “current password” field. It should enter the current password and hit tab twice now; and then enter the new password twice.

    Please let me know if this works for you.

  14. Chris says:

    Hey guys, I figured out a few things

    1) the issue of “Fail: The specified file was not found.” on line 91, ie the line that tries to access chrome. Put triple quotes around the path on line 74, so for example for XP: ChromeEXE = “””C:\Documents and Settings\Chris\Local Settings\Application Data\Google\Chrome\Application\chrome.exe”””
    Apparently that escapes out the spaces in the path

    BEFORE CONTINUING, MAKE SURE (and TEST it!) that your account recovery info works, in fact I would tell gmail that you have lost your password and make sure you’re able to recover it

    2) I hated having to hit OK several times for each password change, so I put an apostrophe (beside the enter key) in front of every line in the script that starts with WScript.Echo . putting the apostrophe comments it out, the danger is if the script fails you’ll have no idea what your current password is, which is why you need to make sure the recovery works before hand

    3) With my account, everytime I’d go to the login page it would already know my login name so only my password is needed, but the script would try to put in login AND password. To fix this comment out or delete line 149 and 150

    ‘oAutoIt.Send un & “{TAB}”
    ‘oAutoIt.Sleep 250 * iSlowConnectionFactor

    to prevent the login name from being put in.

    After making those changes it worked, and it went without any human input needed. HOWEVER, for some reason when it came time to set the final password, it screwed up. I used the account recovery to reset my password and then was able to successfully put in the password I wanted. Looking at the code for the 99 tries vs the final try, I think the issue is this:

    Line 109: oAutoIt.Send tCurPw & “{TAB}{TAB}”

    Line 127: oAutoIt.Send tCurPw & “{TAB}”

    So it looks like the final try is missing a tab, but I’m not going to run it all again to try 🙂

    As always, TRY AT YOUR OWN RISK!!!!

  15. Jassi says:

    Hi

    I copied the script onto the AutoIT SciTE script editor and made the required changes for the email and passwords. I tried to compile it and get the error on line 2 : ‘ versions error: Unterminated String. I get the same error when i run it from the desktop

    I clipped the part till the script says Declare variables and objects…but still it showed the same error of unterminated string.

    Please Help !!

    • marble68 says:

      This is a VB Script, not a native AutoIT script.
      You should save it as a file with the VBS extension and use cscript.exe to execute it.

  16. Jerry says:

    Just wanted to say thank you for this post. I’ll give the script a try. I’ve just started using my new Android phone (Samsung S4 with T-Mobile) and there’s a lot to learn.

    • marble68 says:

      Sure Jerry.

      If you have remote recovery tools installed before you lose your device, you’ll likely never need this.

  17. Annoy****** says:

    I am looking for using Gmail old password and I find this page. It’s really helpful especially the auto-script. Thanks!!

    About the issue of space:

    ChromeEXE = “C:\Documents and Settings\Chris\Local Settings\Application Data\Google\Chrome\Application\chrome.exe”

    I am using XP and still cannot run the script by using triple quotes, yet, I got it works simply using

    ChromeEXE = “chrome.exe”

    Hope it helps!

  18. numerge says:

    this script does not work. it changes password only one time then it fails entering the new password again. if anyone has an updated version, please share.
    i’ll have a look myself at the script someday. f#*k you google.

  19. Euen Archibald Potter says:

    I. Want. To change old password on. Google. For larenza

  20. olaf buitelaar says:

    Thanks for the script, worked fine. only i had to made some small changes.

    1) path needed to be quoted, like; ChromeEXE = “””C:\Program Files (x86)\Google\Chrome\Application\chrome.exe”””

    2) remove the entry of the username, as chrome/google stores your user name, every new login, fails as it first tries to enter the username and then the password. effectively only the password is needed.
    So change the Function GLogin(un, pw)
    and remove these lines;
    ‘oAutoIt.Send un & “{TAB}”
    ‘oAutoIt.Send “{TAB}”
    ‘oAutoIt.Sleep 250 * iSlowConnectionFactor

    3) as my chrome always seems to try to store the passwords, i’ve disabled and cleared the stored passwords function.
    This is because;
    3.1) this screws every follow up login, as the password is already filled, and the script would fill it again
    3.2) the pop-up asking if i would like to store the password, screws the automation script as it seems to get the focus.

    And a personal preference, i’ve disabled some pop-up’s as it as a little too involved..
    I more enjoyed..just lay back and watch…

    • rick says:

      Olaf: You mean the path needs to be double-quoted?? I get an “Expected end of statement” error if I do that. (I get a different error with single quotes though.)

      • rick says:

        Follow up: just using “chrome.exe” as an earlier commenter suggested worked for that line. God knows why.

    • marble68 says:

      Fixed, I think. – the login parameter now causes login page to ask for the email each time; regardless

  21. rick says:

    Google must have changed their log-in screen yet again, because now this is screwing up by inputting the username each time, while Google actually retains the name of the last account that signed in. So the email address is put into the password field, and it eventually gets locked out after doing so 5 or so times.

    Amusingly, this actually doesn’t stop the password from being changed, since the next thing it pastes is the password, right into the “old password” field in the “change password” window. Haha.

    I’m going to have to figure out how to modify this so it only enters the email address once. 😛

    • marble68 says:

      I’ll try and add a select all then backspace keystrokes – that ought to fix this issue.

    • marble68 says:

      Fixed –

      • rick says:

        Wow, thanks so much!!!

        There appears to be an issue with lines 175 and 176. 175 is commented out, and I’m not sure if it’s supposed to be…. Then I believe line 176 is missing a quotation mark around the URL, but I’ve never coded in VB before, let alone worked with AutoIt, so I’m not 100% sure what’s supposed to happen there, especially since the URLs are so similar….

        I’ve tried various fixes, to no avail. I’m going to keep futzing around with them though.

  22. marble68 says:

    Maybe I should put this in GitHub –

  23. Igor says:

    Thank you very much for the script. After several fixes it worked for me.

    It took me a while to make it work and figure out that I do not need to do anything with AutoIT except for installing it.

    Also I had to change line 179 oAutoIt.Send “https://accounts.google.com/ServiceLogin?Email=%22%22{ENTER}” to oAutoIt.Send “https://accounts.google.com/ServiceLogin?Email={ENTER}” because If you go to https://accounts.google.com/ServiceLogin?Email=“”, Google assumes that quotes are a part of your username. And it makes the script unable to solve this. I’ll send a pull request on Github.

    • Robert Koernke says:

      Igor, look above you need to add in a backspace in the loop. But I no longer think gmail is allowing the 100. We will see if it works for you.

    • Robert Koernke says:

      NM… It did work. I can post my version of the script.

  24. vishal says:

    Hi Marbles68,

    Thanks a lot for great work
    Please send/share me updated script.
    Also if you can step down the steps like ,
    Step1 – copy script and save it with .vbs
    Step2..

    Thanks in advance

  25. needer says:

    can someone make video how script working.? some videing hypercam 3 how using this gmail password changes. i get always error when i tr mading script. video can help me and other.

  26. Robert Koernke says:

    It appears, that as of Mar 2015… Gmail has patched this hole we are trying to exploit. In the final attempt, it throws an error saying “can’t reuse old password”…d’oh.

  27. needer says:

    can you send me email is crd979@gmail.com

  28. James says:

    As of 7/2015, I can confirm that if you change your password 100 times – I did it manually – you can recover your previously used password.

    • marble68 says:

      Thank you James.

      I will investigate trying to create a new version of this script; and put this version into GitHub so it’s a bit easier to fork. I’m super busy right now but will circle back to it asap.

  29. MILLY SHRUM says:

    Helpful comments – BTW if you need a GA DoR IRP T-139 , my wife found a template document here https://goo.gl/el7ymR.

  30. flintstone says:

    Could anybody tell me if a version exists which deals with the current state of Google’s pages?

Leave a Reply

Currently you have JavaScript disabled. In order to post comments, please make sure JavaScript and Cookies are enabled, and reload the page. Click here for instructions on how to enable JavaScript in your browser.