Schema - sjlouder/Lastpass-PS GitHub Wiki

This page contains some notes on the blob schema. Anything with a question mark is a guess.

The Blob is made up of "chunks" A chunk is made up of a 4 character type key, a 4 byte big-endian length, and a payload equal to the value of the length in bytes.

Key Type
AACF App account fields
AACT App accounts
ACCT Accounts, SecureNotes, Folders
ACFL Account fields
ACOF Account other fields
ANTE ?
ATTA Note attachments
ATVR Attachment version
BBTE ?
CBCU ?
DOTE ?
ENCU ?
ENDM End marker?
ENTA Company admin
ENTM Enterprise model
ENTO Enterprise offering
ENTR Enterprise user role
ENTU Enterprise user
EMEE Emergency contact
EMER Emergency contact
EQDN Equivalent domain
FETE ?
FFCF ?
FUTE ?
GRPI ?
HSHR H? Share
IDNT Identities
ILPR Legacy Premium
IPTE ?
LPAV Version
LPFF Form fills
MSFI ?
MXID Max ID
NEVR Never fill accounts
NMAC ?
PNDG Pending shares
PREF Preferences
PREM Lastpass Premium status
PRIK RSA Private Key encoding hex
PSHD ?
PSHE ?
SHAL Share L?
SHAP ?
SHAR SharedFolders
SPMT Site prompt?
SYTE ?
TATE TrueAPI trial experience
TMPL Template?
TOTP Multifactor enabled?
URUL URL Rules?
WMTE ?
WOTE ?
WPTE ?