"Never Save password" list
Reported by
planet...@gmail.com,
Mar 22 2018
|
||||
Issue descriptionUserAgent: Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Steps to reproduce the problem: *Accidentally* save a critical password. I connect to a multiple systems using high level passwords, eg my sysadmin password. The password database gets copied to any machines where I use Google Chrome. Some of these have weaker security. While I would endeavor to never save critical passwords mistakes happen. Typical case would be where a user (eg me) uses the same Google identity in a work environment and on various home computers. What is the expected behavior? Desired behaviour: Google refuses to save a password that has been added to a Never Save Passwords encrypted list. What went wrong? From a security perspective it would be desirable to be able to add key passwords to an encrypted list of never-to-be-saved passwords. Since only a secure hash is stored the background password database copy does not compromise these passwords. Did this work before? N/A Chrome version: 64.0.3282.140 Channel: n/a OS Version: 6.3 Flash Version:
,
Mar 28 2018
Considering this as a feature request and making the status to Untriaged so that the issue would get addressed. Thank you.
,
Mar 29 2018
I think this is mostly a feature request for the password manager, adding appropriate label. Note that you can delete the accidentally-saved password via chrome://settings or via passwords.google.com. That will cause it to be removed from all synced Chrome instances. Alternatively, you can also turn off syncing of passwords in particular at chrome://settings/syncSetup.
,
Mar 29 2018
Marking this as available. The feature sounds reasonable but it won't be anything we build any time soon due to prioritization.
,
Jun 1 2018
There's also a list of sites on which passwords should never be saved at chrome://settings/passwords; since passwords should be unique per-site, you should be able to use that. |
||||
►
Sign in to add a comment |
||||
Comment 1 by krajshree@chromium.org
, Mar 22 2018