Password management programs have existed since the 90s, and browsers added password management as a built-in feature in the early 2000s.
However, PCMag has always advised users to get their passwords out of insecure browser storage and into a proper, well-protected password manager.
Password managers extract passwords from browsers, delete them, and turn off browser-based password capture.
Users who want to switch to a dedicated password manager will have to actively export passwords from the browser and import them into their new product.
One of the password managers that users can switch to is Google Password Manager, which is conveniently built into Chrome.
However, serious contenders use zero-knowledge techniques to protect encrypted data so that no one, including the password company or the government, can know the master password or decrypt data.
The latest KeePass update removed the option to export passwords without requiring entry of the master password.
Users can enable or disable Google Password Manager by clicking Autofill, selecting Password Manager, and turning on/off the options for Offer to Save Passwords and Auto Sign-in. Users can also read How to Master Google Password Manager for more information.
To supplement their own knowledge and experience, the author consulted experts from several well-known commercial password manager companies, including Craig Lurey, co-founder and CTO of Keeper; NordPass CTO Tomas Smalakys; and Michael Crandell, CEO at Bitwarden.
These experts caution against using browser password managers and recommend using dedicated password managers that use zero-knowledge techniques to protect encrypted data.
Experts also advise users to use different passwords for different accounts, enable two-factor authentication, and regularly check their password manager for any compromised passwords.
Overall, relying on browser password managers like Google Password Manager is not recommended by experts.
Users should switch to dedicated password managers that use zero-knowledge techniques to protect encrypted data and follow best practices like using different passwords for different accounts and enabling two-factor authentication.
Key information:
- Experts tell us that relying on Google Chrome (or any browser) to manage your passwords is a seriously bad idea.
- Password management programs have been around since the ’90s, and the major browsers added password management as a built-in feature in the early 2000s.
- Ever since then, we at PCMag have advised getting your passwords out of insecure browser storage and into a proper, well-protected password manager.
- Back then, we could point to password managers that would extract passwords from your browser, delete them from the browser, and turn off further browser-based password capture.
- If you want to switch to a dedicated password manager, for instance, you’ll probably have to actively export passwords from the browser and import them into your new product.
- Specifically, should you use Google Password Manager, which is conveniently built right into Chrome?
- Serious contenders use zero-knowledge techniques to protect your encrypted data so that no one-not the password company, not the government, nobody-can know your master password or decrypt your data.
- The latest KeePass update, 2.53.1, removed the option to export passwords without requiring entry of the master password.
- How to Enable or Disable Google Password Manager.
- Before getting into whether you should use Google Password Manager, let’s review how you can shut it down (or fire it up, if that’s your choice).
- Now click Autofill, just below You and Google, and click Password manager.
- If you want to use Google Password Manager, turn on the items Offer to Save Passwords and Auto Sign-in.
- For more, you can read How to Master Google Password Manager.
- What the Experts Say About Browser Password Managers.
- To supplement my own knowledge and experience, I called on experts from several well-known commercial password manager companies, including Craig Lurey, co-founder and CTO of Keeper; NordPass CTO Tomas Smalakys; and Michael Crandell, CEO at Bitwarden.
