3 ms·

Also in Chrome: Go to Settings -> Show advanced settings -> Manage saved passwords -> Click on a "hidden" password -> Click on "Show" button -> Voila, password

• makeset 13y ago
  I did this on a Mac and got a modal dialog saying "Do you allow Chrome access to keychain item blah.com?" Click anything, get another modal dialog for bleh.com. I realized it was going to go through each and every password I've ever saved in Chrome. With modal dialogs. kill -9.
  • sitharus 13y ago
    I separate high security passwords in to their own keychain with a different password. Every time I start chrome it prompts for access. Out of all the things Chrome does this is one of the most annoying.
• jwcrux 13y ago
  Absolutely! This functionality is present in most (if not all) browsers. The goal of this post was to show how malware could automatically attempt to extract all credentials. However, that's certainly a good feature to mention!
  • a9entroy 13y ago
    But passwords are already available in plaintext. This fact alone means that passwords are not exactly hidden from the logged in user. As an analogy, say you have a house and you have a drawer where you keep all your secret information. If you really want to keep the information secret, then you shouldn't allow outside visitors inside your house. You could encrypt the secret information to make it difficult for the attacker to read the information. But he still has access to your drawer because you let him into your house. The attacker can install a remote camera near your drawer to see how you decrypt the information, or he can directly see the decrypted plaintext. So, don't allow anyone into you house.
  • Derbasti 13y ago
    Firefox requires your master password (if you have one) to view your passwords in plain text.