New issue
Advanced search Search tips

Issue 630314 link

Starred by 4 users

Issue metadata

Status: Archived
Owner: ----
Closed: Sep 2016
Components:
EstimatedDays: ----
NextAction: ----
OS: Windows
Pri: 3
Type: Bug

Blocking:
issue 347825



Sign in to add a comment

Chrome should show passwords without reauthentication on Win if there is no OS password

Project Member Reported by vabr@chromium.org, Jul 21 2016

Issue description

OS: Windows

What steps will reproduce the problem?
(1) Have a Windows machine without a OS password set.
(2) Save a random password on https://rsolomakhin.github.io/autofill/
(3) Open chrome://settings/passwords, locate the password, click the password field and the Show button.

What is the expected output?
Chrome should reveal the password without attempting to reauthenticate the user.

What do you see instead?
Some users (see  bug 347825  comment #0, last sentence) report that Chrome tries to reauthenticate them in this situation.


This bug needs to gather some reproduction steps, more detailed than above. If you have this issue, please share the information about your set-up. Anything you might think relevant is worth sharing: Did you ever have a non-empty OS password? Are you the only user on that OS? What Windows and Chrome version is this? Is your user an administrator on the device? Does this happen always? etc.
 
I have Win-7 with Chrome Version 52.0.2743.82m and the last time I came across this issue I went to "chrome://flags/#password-manager-reauthentication"; pressed Enable, and restarted Chrome to fix the issue.  Now it is my understanding that Google has removed this fix due to security issues so the problem with viewing my saved passwords is now back unless or until I create a Windows Password.  I read on one of these forums that I need to create another User Account, but I really don’t want to do that because of all the info stored under my User Account, for which I don’t use a Windows Password.  Is it really necessary to create another User Account or can I just password protect my User Account to be able to have access to my saved passwords?  If it is possible to just password protect my User Account to be able to have access to my saved passwords, can someone please give me step-by-step directions so I don’t mess anything up?

Comment 2 by vabr@chromium.org, Aug 9 2016

Labels: Needs-Feedback
Hi, thank you for your feedback. I am not sure if I understand the problem correctly:

Under the Windows account, where you do not use the OS password, what exactly happens if you visit chrome://settings/passwords and try to view a website password? Does Chrome show the website password to you? Or does it show any other dialogues, alerts, etc.?

The privacy protection of asking you your OS password before showing your website passwords can obviously only work for accounts which do have some OS password. For the rest, viewing website passwords should work without the privacy protection, i.e., your website password should be shown directly upon your request.

Comment 3 by vabr@chromium.org, Aug 9 2016

(Just for the record, when I tried to reproduce this issue, I used Windows 10 with a non-admin account without OS password and Chrome 51.0.2704.106. When I clicked the "Show" button on a website password in chrome://settings/passwords, the password was shown immediately. So I was not able to reproduce the issue.)
Project Member

Comment 4 by sheriffbot@chromium.org, Aug 17 2016

Labels: -Needs-Feedback Needs-Review
Owner: vabr@chromium.org
Thank you for providing more feedback. Adding requester "vabr@chromium.org" for another review and adding "Needs-Review" label for tracking.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Comment 5 by vabr@chromium.org, Aug 18 2016

Labels: -Needs-Review Needs-Feedback
Owner: ----
Oh sheriffbot@...

Reverting #4, because the feedback from #2 is still needed.
Project Member

Comment 6 by sheriffbot@chromium.org, Sep 17 2016

Status: Archived (was: Unconfirmed)
No feedback was received in the last 30 days from reporter "vabr@chromium.org", so archiving this. Please re-open or file a new bug if this is still an issue.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Sign in to add a comment