Took a moment for me to figure out that this is https://passwords.google.com/ https://passwords.google.com/ and seems to be surfaced natively in Chrome if you a

Took a moment for me to figure out that this is https://passwords.google.com/ https://passwords.google.com/ and seems to be surfaced natively in Chrome if you are signed in. I don't have a problem with a password export and I'm not sure anyone could but it is clear that for this to be offered as a smooth and convenient web-based experience that someone else holds the keys here. Your passwords may be safe in the possession of someone else and you feel that you trust them... but they do hold the keys to encrypting them and keeping them safe and that means that at some level they have access to your passwords. Which I guess means they could be requested by law enforcement with a warrant, etc. Whereas a dedicated password manager wherein you hold the encryption passphrase too would mean that the passwords are safe from any third party including the provider of the service. Export CSV isn't the dangerous feature, someone else holding the keys to your passwords is a dangerous feature. PS: I've probably missed some announcement that says this is actually super-secure and impossible for law enforcement to request with a valid warrant, etc... in which case please do share the announcement. It wasn't in the article, but this comment is longer than the article.