Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

My pc was stolen and I had Chrome with sync active on it.

Now I'm login into Chrome from a new pc and I'm seeing an autofill entry with a name and address I don't recognize, my theory is that it must be an autofill used by someone who has the computer now (the robber or a 2nd hand buyer)

I can use SQlite browser but I have no idea where to look for the synced autofill records so I can check the create date. Any ideas?

share|improve this question
Ha! That’s awesome. If only all criminals could be this dumb. So what happened? Did you give the address to the police to track down? – Synetech Sep 8 '13 at 0:18
up vote 3 down vote accepted

Download SQLite Database Browser. Head over to %localappdata%\Google\Chrome\User Data\Default and copy Web Data file to a separate folder.

Now open Web Data with the SQL Lite browser. Click on Execute SQL and type

FROM   autofill
WHERE  VALUE LIKE 'your-autofill-entry' 

enter image description here

Make a note of the pair id, and type in

FROM   autofill_dates
WHERE  pair_id = number-obtained-from-above-step

That'll get you the Unix epoch of when the autofill entry was created

enter image description here

Head over to Epoch converter and you'll get the Epoch converted to the date/time you're familiar with.

share|improve this answer
Worked brilliantly, thanks for the clear post with the screenshots. – Pedro Jan 20 '12 at 22:33
glad to help @Pedro! – Sathya Jan 21 '12 at 4:57

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .