Something interesting happened last week.

Elliot Kember posted on his blog about a discovery that he made while working on a project. He had gone into the Google Chrome settings and saw an area for saved passwords. He was alarmed to find that Google does not just keep track of passwords for the sites you collect. They actually keep them completely viewable, in full, along with your username and the associated URL.

Passwords On Display

For those who have never looked in their browser settings, here is how it works. Go into the Settings tab by pressing the menu button in the right hand corner of your screen. It will look like three lines on top of one another. This will bring down a menu.

Scrolling down to the bottom you should see Show Advanced Settings. There will be a section titled Passwords and Forms, with two little check boxes. One is to enable autofill, and below that is allowing Chrome to ask you if you want to save your passwords. There is also a button for managing saved passwords, and this is where things get crazy.

When you click on that you will be given a separate box with every website you have authorized your password to be saved. All of these will show dots rather than letters…so far so good. Until you hover over each box and hit Show. This gives the actual password, right next to your username and the URL.

What’s The Problem?

On one hand this is pretty helpful for retrieving forgotten passwords without the email recovery function on most sites. On the other, it is a pretty big security flaw. There is no master password or fail safe that attempts to verify your identity. All someone needs is the access to your computer, and they can quickly sign into anything they like, as long as you have stored the password at some point in time.

What did Google have to say about this? Nothing officially, but the head developer on the Chrome project popped into Y Combinator and left a comment about it. According to Justin Schuh, they did this for our own good.

“We’ve debated it over and over again, but the conclusion we always come to is that we don’t want to provide users with a false sense of security, and encourage risky behavior,” he said.

This was such an obvious case of passing the buck that it was painful to read. You can read the rest of his comment here, where he talks about how someone malicious could get into your account and pick up details anyway, and that a master password (or any security) wouldn’t help someone who really wanted your data.

You hear that, guys? Might as well leave your doors unlocked tonight, because if someone really wants to get in they will find a way. No point in offering security if a pesky criminal could wriggle their way past the defenses.

Bottom line? Don’t use Chrome for anything password protected, and never agree to have a password saved. The minor inconvenience of typing it in is worth it for your safety.


HP Chromebox J5N50UT - 2016 (16GB SSD, Celeron 2955U @1.4GHz, 4GB RAM) CHROME OS picture

HP Chromebox J5N50UT - 2016 (16GB SSD, Celeron 2955U @1.4GHz, 4GB RAM) CHROME OS

$32.00



Two Chrome Books good condition One Old One New picture

Two Chrome Books good condition One Old One New

$225.00



HDMI Cable 8K UHD 2.1 HDTV 3D 2160P HDR 120Hz 48Gbps Dolby HDCP 2.2 RGB 4:4:4 picture

HDMI Cable 8K UHD 2.1 HDTV 3D 2160P HDR 120Hz 48Gbps Dolby HDCP 2.2 RGB 4:4:4

$9.99



Sector 5 Chromebook Model E1 . Chrome OS. 4gbRAM  , 32GB SSD picture

Sector 5 Chromebook Model E1 . Chrome OS. 4gbRAM , 32GB SSD

$32.00



HP 14a-nf0131wm Chromebook Laptop 14

HP 14a-nf0131wm Chromebook Laptop 14" 128GB UFS N200 1.8GHz 4GB Chrome OS

$139.99



16Ft Chrome Car Trim Strip, Self-Adhesive Automotive Exterior and Interior Side  picture

16Ft Chrome Car Trim Strip, Self-Adhesive Automotive Exterior and Interior Side

$16.99



ASUS Chromebook CX1 17.3

ASUS Chromebook CX1 17.3" FHD Celeron N4500 4GB 128GB eMMC Cam Chrome OS

$169.00



Lenovo 14e Chromebook - AMD-9120c, 4GB RAM, 32GB SSD, Chrome OS picture

Lenovo 14e Chromebook - AMD-9120c, 4GB RAM, 32GB SSD, Chrome OS

$16.99



Acer Chromebook C732 Laptop 11.6

Acer Chromebook C732 Laptop 11.6" 4GB RAM 32GB SSD Chrome

$61.12



Dark ASUS Chromebook - Chrome OS Simplicity stylish ASUS Chromebook picture

Dark ASUS Chromebook - Chrome OS Simplicity stylish ASUS Chromebook

$180.00