Chrome Leaves Website Passwords Exposed In Its Settings

7 August 2013

The Guardian:

Seeing the passwords is achieved simply by clicking on the Settings icon, choosing “Show advanced settingsā€¦” and then “Manage saved passwords” in the “Passwords and forms” section. A list of obscured passwords is then revealed for sites – but clicking beside them reveals the plain text of the password, which could be copied, or sent via a screenshot to an outside site.

No master password required. Nothing. Just follow a couple of links in Chrome’s UI and and all your passwords are shown onscreen in plain text.