Chrome Leaves Website Passwords Exposed In Its Settings

  • bzamayo.com/chrome-password-failure
The Guardian:

Seeing the passwords is achieved simply by clicking on the Settings icon, choosing “Show advanced settings…” and then “Manage saved passwords” in the “Passwords and forms” section. A list of obscured passwords is then revealed for sites - but clicking beside them reveals the plain text of the password, which could be copied, or sent via a screenshot to an outside site.

No master password required. Nothing. Just follow a couple of links in Chrome’s UI and and all your passwords are shown onscreen in plain text.