I realized that in Chromium (and also Chrome) for Linux it is possible to see all saved passwords in clear text. That seems a bit strange to me... after a short research I found out that

  • it is not like that in the Windows edition of Chrome where you need your Windows password to see your saved passwords in clear text.
  • in Firefox you need a master password to see your saved passwords.

Soo, my questions are the following ones:

  1. If nobody else but me has physical access to my PC, it is a security risk not to have a master password for my saved passwords in Chromium?
  2. Why does Google not implement that same feature for Linux while it exists for Windows???
  3. How save is it in general to save my passwords in Chromium?
  4. I set a synchronisation password in Chromium. Does that mean that my passwords are saved on a google server in ENCRYPTED form so that not even google can read them, even if they wanted? I mean, do they have a key for it in this case?

I am curious for your answers!

Best Thomas

  • You have a master password for Chromium passwords. It is the keyring password. – Pilot6 Oct 21 '15 at 22:30
  • 1
    Not really! I am using Lubuntu with autologin, and I am never asked for any keyring password. Nethertheless I can totally easy see my saved Chromium passwords... – Thomas F Oct 22 '15 at 23:57

Google leaves your Chrome passwords unprotected to promote security. (article)

Google doesn't secure stored passwords, stating that it does not want "to provide users with a false sense of security and encourage risky behavior." Schuh's argument is that if a would-be attacker had access to a user's machine then "the game was lost," as there would be "too many vectors for [the attacker] to get what he wants."

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.