1. Configuration prerequisites
2. Common places to find config.inc.php
3. How to use this script
4. How this script works

If Roundcube Webmail is configured with the des_key to encrypt passwords, and the configuration file contains a setup like

$config['des_key'] = 'rcmail-!24ByteDESkey*Str';

then this script can be used to decrypt them.

Here are the typical paths, depending on how Roundcube was installed:

git clone https://github.com/TaddlM/roundcube.git
cd roundcube

• Open the PHP script decrypt_roundcube_password.php.
• Replace encrypted string with your encrypted password on line 15.
• Replace des_key with your des_key from Roundcube config that was used to encrypt the password.
• Execute the script

php decrypt_roundcube_password.php

This PHP script decrypts IMAP passwords stored by Roundcube Webmail. It takes a Base64-encoded encrypted password, extracts the initialization vector (IV), and decrypts the remaining ciphertext using the Triple DES (3DES) algorithm in CBC mode. The des_key used in the Roundcube configuration is required to perform the decryption.