Geeks2U Promise
We guarantee you'll love our fast, friendly service - or we'll refund your money.  
133,572 Happy Customers & Counting
Need tech support?
1300 769 448
Extended hours, 7 days a week
Home  /  geekspeak  /  Google Chrome password “bug” – security flaw or feature?

Google Chrome password “bug” – security flaw or feature?

Google’s Chrome browser doesn’t hide your saved passwords, but is that a bad thing?

These days we’re expected to remember dozens of passwords, with security experts insisting that they be long, complicated and unique. Keeping track of all your passwords can become almost a full time job in itself, so any help is much appreciated.

To make life easier, modern web browsers offer to remember your passwords so you don’t need to type them in every time you visit popular sites like Gmail, Facebook and Twitter. Having your browser remember your passwords can be a real time-saver. In some ways it also helps with online security, letting you use long and complicated passwords without the hassle of remembering them all.

The trouble with letting your browser remember your passwords is that if someone gets their hands on your computer they might have easy access to all your passwords. I noticed this a few years ago when I first switched from Firefox to Chrome as my default web browser. This password issue is nothing new, even though it’s made the headlines recently.

Firefox let me set a Master Password, which I needed to enter before I could see my full list of saved passwords. It’s not enabled by default, I needed to open the Security tab in the Preferences and tick “Use Master Password”. Enabling this seemed like a reasonable extra security precaution, even though my computer is locked with a password so I’m not too concerned about people snooping around.

When I first installed Chrome I was frustrated to discover that it’s happy to remember your passwords but doesn’t let you set a Master Password. This means anyone using my computer can type “chrome://settings/passwords” into Chrome’s URL bar and see a full list of my saved passwords. It’s a disturbing sight when you’ve had it drummed into you that your passwords must be kept secret.

Chrome’s lack of a Master Password really bothered me, so I did some research and soon discovered that it wasn’t a “security flaw” but rather a deliberate choice by Chrome’s developers. Their argument is that saving your passwords in your browser creates security risks, whether you use a Master Password or not. If someone has access to your computer and knows what they’re doing they can bypass a Master Password. Using one only lulls people into a false sense of security.

Removing a security feature to encourage security awareness naturally doesn’t sit well with some people. Of course many of them weren’t aware of the issue at all until it made news recently. Now they’re horrified to discover their passwords are in plain view and some are considering abandoning Chrome completely. A Master Password might not keep out determined hackers with access to your computer, but it would at least foil family members trying to sneak a peek at your Facebook password.

Even with the Master Password issue I was still determined to make the switch from Firefox to Chrome, so I decided it was time to investigate third-party password management services such as 1Password, LastPass, KeePass and Roboform. These let you store your passwords securely online or in an encrypted file on your computer, rather than simply saving them in the browser. It’s protected by a Master Password but some online options like LastPass offer the added protection of two-factor authentication.

Now that I use a secure password locker I don’t let any of my browsers remember passwords. You might argue that I’ve swapped one security risk for another, but these password lockers are generally considered a lot more secure than the password features in web browsers. Rather than freak out about Google’s lack of a Master Password, you should also use it as an excuse to reevaluate your approach to password management.


Recent News

Google recently updated the smaller of its two smart displays, the Google Nest Hub, with a 2nd generation model that doesn’t change much visually if you’ve ever seen the original model. For those coming to the party late, Smart Displays are effectively smart speakers – think devices like the Google Nest Mini, Amazon’s Echo speakers

As our lives become increasingly more remote and location independent, the need for mobile devices is on the rise. Many Australians enjoy using multiple mobile devices – such as a smartphone, tablet and computer – to live their lives. Whether it’s responding to work emails, transferring money to a friend or tracking your steps on

Ever since Microsoft released Windows 10 – which was, astonishingly, all the way back in mid-2015 – the company has resisted the urge to shift to Windows 11, or indeed any other full “update” to Windows over that time. That’s a long time in the Windows world; after all, the predecessor version of Windows 10,

Samsung recently sent me one of its lower-cost SSD drives, the Samsung SSD 980 NVMe M.2 to test out. Drives like this one are designed for PC builders and upgraders looking to eke out as much performance from their PCs as possible, but I was curious to see what kind of impact it might have

Coronavirus (COVID-19) Update

Learn about the precautions we are taking and our new contactless pick-up and remote service options. Read More
Get help setting up your home office or homework area today. Learn More