Chrome 69 adds new Password Manager with Random Password Generation built in

[AlTech]

Chrome 69 adds a new Random Password Generator to its password manager. Chrome now prompts users to sync newly generated passwords across devices by connecting them to their Google Account.

 

This should help improve password security especially amongst non-techies.

 

Quote

Google is releasing an entire new design for Chrome today with new features and tweaks to the browser’s overall appearance. You can read more about the redesign here, but one of the big new features is an improved password manager. Chrome will now offer to automatically generate a random password when you sign up to websites for the first time. This password will be stored inside a Google Account securely and synced across desktop and mobile versions of Chrome.

This should stop regular Chrome users from always picking the same password for each site, and ultimately ending up with a security headache if a site is breached. Chrome’s password manager is a welcome change, but you may still want to use a dedicated and separate password manager. Chrome only manages passwords inside its browser, so if you sign into various mobile apps or apps on a TV like Netflix then these login combinations won’t be stored in a Google Account. That’s particularly relevant now that iOS 12 is about to introduce the ability to autofill passwords across browsers and apps from third-party password managers.

 

 

So yeah, whilst I appreciate what google is trying to do here, Google is definitely trying to lock users further into Chrome by making this tied to Google Accounts.

And I really don't like them forcing people to stay in the Google ecosystem.

 

Source:

https://www.theverge.com/2018/9/4/17818714/google-chrome-password-manager-security

 

[Sakkura]

Very cool. I will still prefer using a separate manager, but this could be fantastic for the 98% of people who are not using a password manager already.

[NelizMastr]

Tbh, Safari has had this for years (the generation of passwords specifically), across both macOS and iOS. It's interesting to see how long it took to get the same feature in Chrome. 

[The Benjamins]

They had the random password gen for a while AFAIK. but I want better access to my saved passwords, it currently does not feel like a real password manager.

[Bouzoo]

Locking users into their ecosystem? It's not. If you don't like it, don't use, it's optional, an added functionality. If they made it so that is the only way to sync devices, that would be locking users.

I'm sure they'll extend it like Apple is doing, somewhere in the future. 

[Syntaxvgm]

My boss gave me a company account from the previous employee and once I logged in on chrome, I had all of his personal passwords in plain text if I wanted. Facebook, bank, everything. It's a really stupid way to do things. Even if I didn't have the account, you can see them if they are afk and you use their computer. 

[Shally]

Just now, Syntaxvgm said:

My boss gave me a company account from the previous employee and once I logged in on chrome, I had all of his personal passwords in plain text if I wanted. Facebook, bank, everything. It's a really stupid way to do things. 

I think I would only see it being secure if to use it you needed 2FA for chrome itself

[Sauron]

I'd rather use keepass, I use firefox on my desktop anyway...

[Tech Enthusiast]

21 minutes ago, AluminiumTech said:

So yeah, whilst I appreciate what google is trying to do here, Google is definitely trying to lock users further into Chrome by making this tied to Google Accounts.

And I really don't like them forcing people to stay in the Google ecosystem.

 

1

How are they forcing people to use this?

How are they locking people away from using a different browser?

 

Every browser has features that are exclusive.

By that logic, every browser would "force" people to stay with them, while locking them away from other browsers.

Bashing a company for making their software "too good", so people absolutely have to use it,... seriously? 

 

As a matter of fact: Every feature is optional. If you like it, you are free to use it, not forced to use it. Same goes for every product on the planet. 

 

[bcredeur97]

I cant wait for the day something happens and people have to change password managers and there is no way to transfer all the data from one to the other or something.

It'll be a mess.

[mikat]

Nice

[JoeCoke]

1 hour ago, mikat said:

Nice

Aghhhh you beat me to it.

[Linus_torvalds]

1 hour ago, Rattenmann said:

As a matter of fact: Every feature is optional. If you like it, you are free to use it, not forced to use it. Same goes for every product on the planet.

Except windows 10 for windows users. All they are forced to install windows 10. Some of these peoples computers did that for them. They upgraded automatically from older versions of windows to windows 10.

As proven by researches other countries made, you can't opt out windows 10 "features". It will always send YOUR data to MS.

[Tech Enthusiast]

4 minutes ago, mate_mate91 said:

Except windows 10 for windows users. All they are forced to install windows 10. Some of these peoples computers did that for them. They upgraded automatically from older versions of windows to windows 10.

As proven by researches other countries made, you can't opt out windows 10 "features". It will always send YOUR data to MS.

You are free to not use windows as well.

No one is forcing you to. And my router noticing exactly zero upstream to any Microsoft related endpoint kinda disagrees with the inability to turn it off. They don't make it easy, but that is their right. It is not impossible tho. But also a little offtopic.

 

We are talking about an optional browser feature here. New features are always a plus. Don't like it, don't use it. If at least one person is happy, it is a win for the consumer.

[Linus_torvalds]

2 minutes ago, Rattenmann said:

You are free to not use windows as well.

That's why i wrote for windows users. I am not a windows user and never will be. Of cource i do not give flying f**k what MS does. But it's very sad.

There was big multi page report about windows 10 behaviour. It has keylogger in it, it's sending data to MS even if you disable all the options MS gives you in OS.

[mynameisjuan]

1 minute ago, huilun02 said:

I write my passwords in plain text and on paper

Thats honestly the most secure way to store passwords nowadays. 

[ScratchCat]

Great, Chrome users get to try it straight away - to reset their compromised logins.

 

[ScratchCat]

1 hour ago, Arokhantos said:

I use a website to generate unique passwords every time i refresh it.

How do you know the website isn't logging these and sells them?

6 minutes ago, huilun02 said:

Whats written is incoherent cryptograph prompts

Basically a question written in a way that only I can interpret, and cannot be decyphered (because its not a cypher)

And the password is a random association to the question that comes to mind when I see the prompt

 

So impossible for anyone else to know the password unless they can somehow issue appropriate prompt and read my mind at the same time

Huamns are not particularly good RNGs, we follow patterns. Against a general attack you may be safe (unless you use a generic pattern eg word-related word-number-symbol) but a targeted attack with one or two passwords already known a pattern could be derived by a human to vastly reduce the search space.

[dalekphalm]

3 hours ago, AluminiumTech said:

Google is definitely trying to lock users further into Chrome by making this tied to Google Accounts.

And I really don't like them forcing people to stay in the Google ecosystem.

I disagree - why? Because you can go into the Chrome settings and extract any saved password.

 

Therefore, if you wanted to switch to, say, Firefox, you could go into Chrome, reveal the passwords, and manually save them into Firefox.

[Taf the Ghost]

So Google just wants all of your passwords then.

 

NSA is going to love this.

[suicidalfranco]

keepass still the better solution

[7850OC]

i Love it  Chrome #1 Forever 

[Zando_]

"Chrome 69"

 

( ͡° ͜ʖ ͡°)

[ScratchCat]

1 hour ago, Arokhantos said:

 

How do you know if others sell them ?

I don't but I wouldn't take the risk and neither should anybody.

It's like finding a pile of free door locks, they would work fine in your house but you would never know if whoever put them there kept a copy of the key.

 

[aezakmi]

wha