Secure Notes/Keychain from Time Machine

[buzik]

I am trying to recover or at least see some items from keychain, namely secure notes and web passwords. I do have Time machine backups, including one from 20 days ago, when everything worked. What and how do need to recover my secure notes?

What I tried already was getting the backup of the login.keychain-db file from 20 days ago, get it in, rename it, unlock it and see what is inside. There are some items, but not my notes/passwords. So this is not it.

I think I need not the login keychain, but Local Items, System, System Root.

 

[nouveau_redneck]

If the secure notes are in the local keychain, look in the ~/Library/Keychains folder. Within it there is another folder with a long hexadecimal name. I believe the files you're looking for are in that hexadecimal named folder.