New issue
Advanced search Search tips

Issue 602628 link

Starred by 1 user

Issue metadata

Status: Duplicate
Merged: issue 126398
Owner: ----
Closed: Apr 2016
Components:
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: 3
Type: ----



Sign in to add a comment

Security and privacy issue in google chrome password auto fill method

Reported by prashant...@gmail.com, Apr 12 2016

Issue description

PRIVACY ISSUE
The passwords saved by google chrome isn't secured.
 
VERSION:
Chrome Version: Almost all the versions of google chrome
Operating System: Almost all the operating system (checked in Windows and Linux)

REPRODUCTION STEPS
I've noticed that the username and passwords saved by google chrome is not safe. Although when some unauthorized person tries to see the password saved by google chrome in the settings, he is prompted to enter the password of the user account in order to see the the saved password.
But let's say that my gmail's username and password is saved by google chrome and it automatically auto fills the username and password as soon as Gmail.com is opened.
The password which is auto filled by google chrome could be easily seen by right clicking on the password box and selecting 'inspect element', then by changing the property of the password field from 'password' to 'text', the unauthorized person can easily see the password.
This major security issue could be really dangerous if some unknown person tries  use the browser in the owner's absence.
It would be really nice if this issue could be fixed
 

Sign in to add a comment