Chrome shows passwords

This is really very very stupid on your part if you are letting chrome save your password. Go to
Settings->Options->Minor Tweaks->Show Saved Passwords
Select the website name and click Show Password, and there your are. Your password is shown as plain text! (Of course it should be plain text if it wants to show you the password in readable format. Plain text was just an intensifier to show my disbelief ;).

The same functionality (you can read a-hole-in-security as well,) is also available on FireFox 3.0. Go to
Tools->Options->Security->Passwords->Saved Passwords
But there is Master Password to protect anyone else from seeing the list. If you have not yet checked Use a master password then pray God & leave to mercy of intruder. [By intruder I mean anyone who has access to your machine with your login credentials and with whom you do not want to share your passwords. It can be your roommate, colleague, friend..... or anyone, not necessarily a hacker. ]

If you let your browser save your passwords (which is indeed helpful, given there are tons of site you have registered to), I strongly recommend using a Master Password which is, actually, a password for all passwords. Before auto-filling any of your saved passwords, FireFox asks you to enter the Master Password. So all you have to remember just one password, the Master Password. And the intruder cannot access site using your password-to-that-site unless s/he knows your Master Password.

Chrome simply doesn't have any provision of Master Password. This implies anyone who can open the chrome on your machine (with your OS login) can see all of your saved passwords with just few clicks. Pretty straight forward and easy. So don't ever leave your machine unlocked if you are trusting chrome to keep your passwords safe because it assumes you keep you machine safe :)

12 comments:

Anonymous said...

Thanks for bringing this to my attention! Hopefully Google will sort it out soon...

Kaustubh said...

For Password showing, omg...this is terrible... how could big G mess it up?
as for the rave reviews Chrome has got so far im tempted to try it myself..

one thing is for sure, Steve
Ballmer,(the MS Chief) who wanted to "f**kin kill Google" (yes he DIDhttp://en.wikipedia.org/wiki/Steve_Ballmer#Lucovsky.2FGoogle say that) would have to come up with much more than juvenile-ish foul-mouthedness :D.

Kaustubh said...

one suggestion ....keep a tab on what tech mags/forums are thinking about it.....u could choose sci/tech options in Google News/iGoogle. Buzz is getting crazier by the day.

Kaustubh said...

http://news.google.co.in/nwshp?tab=wn&topic=t

ohh just digressing...have u ever read greatbong.net? His is the most read Indian blog...do give it a try u'd like it fo sho ....
PS:haha..this is undercover marketing oops!
PPS: & next time im gonna write ALL my comments/links in a notepad file first & then copy it all @ once...
PPPS: are Rock On! dekhi kya? :D

smriti said...

Thanks for telling this!!! its really needed for everyone to know this.....
Lets see when this problem will resolve.

kunal said...

@anonymous & @smriti - thanks
@kaustubh - i checked the links u sent :) dint know about greatbong, it looks interesting. rock on dekhi na, decent movie. naam aisa thha ki dekhne jana hi pada ;)

Malyaj said...

really?? den m not gonna even download it now.. ysterde i was about to download it but 4 some reasons (i donno wat) i cancld d proces...
tanks KD.. :)
(psst... but m sure gonna advic to download it to dos of whose paswrds i'd lik 2 knw.. :-D n hv access to der pc.. he he..)
ya im kameena n naughty.. i knw dat.. u dont hav to say.. :-D

kunal said...

@malyaj - man do give it a try.. browser is really cool.. just don't save passwords.

Malyaj said...

ok den dear.. i'l try it 4 sure.. :)

Malyaj said...

man... im getting tired of downloading plugins for chrome.. its not even giving "hindi fonts" option on ORKUT scrapbook... u guys r also havin sam prob.?

Malyaj said...

one more thing.. iv installd java's new version but still its saying to download java plugin...
its sucking yaar...

kunal said...

@malyaj - yes for plugin etc, you will have to wait for sometime for them to come. and language support seems to be there on chrome, but when some sites detect the browser, and dont find the usual ones, they disable some functionality. :(