Google Chrome for Android users are being cautioned about a potential problem with the browser’s handling of passwords. The issue arises when clearing browsing data, as the current version of Chrome for Android deletes saved passwords without requiring any authentication. This means that if users clear their browser history and cache, their saved passwords could be inadvertently erased.
The problem was highlighted by a user on the Google Pixel subreddit, who experienced the issue firsthand. After noticing a slowdown in their Pixel smartphone’s performance, the user cleared their Chrome browser history and cache, unaware that this action would also delete their saved passwords. They were surprised that Chrome did not prompt them for additional authentication, such as a fingerprint, before deleting the passwords.
As a result, the user had to switch back to using Bitwarden for password management, as the passwords deleted from Chrome could not be recovered. The issue was then raised on the Google Chromium developer support forums, prompting Google to acknowledge the problem and promise a fix.
Google’s response includes a recommendation to remove the “Saved Passwords” option from the Chrome for Android clear browsing data user interface to prevent users from inadvertently deleting their password vault data. However, implementing this change will require some product work and will not be immediately available.
In the meantime, Android users are advised to check the Chrome three-dot menu for items listed under the clear browsing data option and ensure that the saved passwords option remains unchecked if they also use the integrated Google Password Manager.
Leave a comment