New issue
Advanced search Search tips

Issue 710398 link

Starred by 1 user

Issue metadata

Status: Duplicate
Merged: issue 126398
Owner: ----
Closed: Apr 2017
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: ----
Type: Bug-Security



Sign in to add a comment

Security: Less that 1 min to know the password of saved accounts in google chrome.

Reported by seven.sr...@gmail.com, Apr 11 2017

Issue description

Follow the below steps to see the account passwords even though it’s not your account. It won’t take a min to hack any passwords.


1.	Select and account to Login and fill the password field with the password you want to know.
2.	Go to inspect and remove type=”password” from the Password Input field.

3.	That’s it the password is visible now.


Whereas when I go to Manager Passwords in settings. It won’t allow me to see the password without giving the google chrome login password.
 
Mergedinto: 646940
Status: Duplicate (was: Unconfirmed)
This is working as intended, as described here: https://www.chromium.org/Home/chromium-security/security-faq#TOC-What-about-unmasking-of-passwords-with-the-developer-tools-
Labels: -Restrict-View-SecurityTeam allpublic
Mergedinto: -646940 126398

Sign in to add a comment