Save password on chrome? Think again chrome://chrome/settings/passwords
1–10 of 27 posts
Re: Save password on chrome? Think again chrome://chrome/settings/passwords
#2This is the main problem with Chrome for me at the moment. How hard can it be to add a master password prompt before showing the passwords? Or even to only store them encrypted?
I know they wouldn't really be safe even if encrypted, but I just want them not to be available to any random person that has access to my computer for 3 minutes...
Re: Save password on chrome? Think again chrome://chrome/settings/passwords
#3This is true of Firefox and (possibly?) IE as well, though IE doesn't have an option to show the passwords in the UI.
If a user has access to your desktop, then it really doesn't matter if your saved passwords are stored in plain text, you've already lost.
And what's the alternative? Ask for a "master" password every time Chrome wants to auto-complete a password for you? That's what extensions like lastpass do, but I don't think it makes sense for that to be the default.
Re: Save password on chrome? Think again chrome://chrome/settings/passwords
#4This is the main problem with Chrome for me at the moment. How hard can it be to add a master password prompt before showing the passwords? Or even to only store them encrypted? I know they wouldn't really be safe even if encrypted, but I just want them not to be available to any random person that has access to my computer for 3 minutes...
Not intended to excuse Chrome here in any way, but I've had no problem using KeePass for my passwords. I use a Chrome extension to let KeePass entries auto-populate in the browser, and my database locks itself after only a few minutes of inactivity (or I can explicitly lock it).
Re: Save password on chrome? Think again chrome://chrome/settings/passwords
#5What do you think it should do instead?
There is no way for it to encrypt the passwords without having to ask you to enter a master password each time it starts.
You could argue that it shouldn't let you see them through the user interface, but I would argue that this would be useless - security through obscurity.
Re: Save password on chrome? Think again chrome://chrome/settings/passwords
#6This is the main problem with Chrome for me at the moment. How hard can it be to add a master password prompt before showing the passwords? Or even to only store them encrypted? I know they wouldn't really be safe even if encrypted, but I just want them not to be available to any random person that has access to my computer for 3 minutes...
A random person with access to your computer could easily install a keylogger in those 3 minutes.
Re: Save password on chrome? Think again chrome://chrome/settings/passwords
#7LastPass anyone ?
Re: Save password on chrome? Think again chrome://chrome/settings/passwords
#8most browsers don't encrypt your locally stored password ... if you've not setup a master password on Firefox it's accessible there in plaintext as well to almost anyone with the knowledge.
Firefox: Tools->Options->Security click on Saved Passwords button.
Does Chrome need a master password system? Yes Is Chrome non-standard by not encrypting the locally stored passwords? Not really
Re: Save password on chrome? Think again chrome://chrome/settings/passwords
#9Why is the author so excited about this? We all knew this feature exists, infact, personally I have been using it to remember my old passwords. Yes, it could be dangerous if someone else is going to view it, but it is as dangerous as giving them your PC.
I'm surprised that such a 'no-value' article has made it to the front page.
Re: Save password on chrome? Think again chrome://chrome/settings/passwords
#10Don't save your passwords in the browser. Instead save them in a password manager such as Password Gorilla: https://github.com/zdia/gorilla/wiki
This way, your passwords become "browser independent". You can switch browsers at will, but still have all your passwords in the same place.