Chrome Password Manager: Find, Export, and Check Saved Passwords

You’ve got a banking login, a work SSO account, a dozen shopping sites, and a streaming password you can never remember off the top of your head. Chrome has quietly been storing most of that for years through its built-in password manager, but a lot of people have never opened the screen where it all lives. That’s a shame, because the Chrome password manager does more than remember logins. It can generate strong ones, flag the ones that got caught in a data breach, and export the whole list if you ever want to leave.

This guide walks through where Chrome saved passwords actually live, how to view and edit them, how the Google password manager syncs across devices, and how the built-in Password Checkup works. It also covers something the password manager was never built to do: protect the tabs you had open when things went wrong. That’s a different problem, and it needs a different tool.

What Is Google Chrome’s Password Manager?

Chrome’s password manager is a built-in credential store that remembers the usernames and passwords you use to sign in to websites. When you log into a site Chrome hasn’t seen before, it offers to save the login; the next time you visit, it fills the fields in automatically.

You get to choose where those credentials live. Chrome offers two storage options: saving passwords to your Google Account, which makes them available on any device where you’re signed in to Chrome, or saving them to the device only, which keeps them local and never sends them anywhere. There’s also a third option worth knowing about — importing device-saved passwords into your Google Account later, if you started local-only and changed your mind.

The same store also holds passkeys, not just traditional passwords. Passkeys are the newer, phishing-resistant sign-in method some sites now support, and Google Password Manager keeps them alongside your passwords rather than in a separate list. If you delete an entry that has both a password and a passkey for the same account, both go together.

It’s easy to think of this as “just autofill,” but the two are related, not identical. Autofill also covers addresses and payment cards. Password Manager is the part specifically responsible for usernames, passwords, and passkeys, and it’s the part with its own dedicated checkup and export tools, which the rest of this guide focuses on.

Where Do I Find the Chrome Password Manager?

You’ll find it under Chrome menu (⋮, top right) > Passwords and autofill > Google Password Manager, or by going to passwords.google.com directly in any browser while signed in. Both paths land on the same list, since Google Password Manager isn’t strictly tied to the Chrome app.

Inside Password Manager you’ll see a couple of separate areas: the main Passwords list, a Checkup tab for security scanning, and a Settings tab that controls whether Chrome offers to save new passwords at all. If you’ve ever declined to save a login for a specific site, that site shows up in a “Declined sites and apps” list under Settings, and you can remove it from that list if you change your mind.

One thing worth knowing up front: passwords are not part of Chrome’s “Delete browsing data” tool. Cache, cookies, browsing history, and autofill form data all live there, but saved passwords and passkeys are managed and cleared only through Google Password Manager itself. That separation is deliberate. It stops a routine cache clear from accidentally wiping every login you have saved.

How Do I View or Reveal a Saved Password in Chrome?

Click the site’s entry in Google Password Manager, then click the eye icon next to the hidden password to reveal it. Chrome doesn’t show saved passwords in plain text by default, and for good reason — anyone with physical access to your laptop shouldn’t be able to read every login at a glance.

1. Open Google Password Manager. Chrome menu (⋮) > Passwords and autofill > Google Password Manager, or passwords.google.com.
2. Find the site. Use the search box at the top if your list is long.
3. Click the entry. This opens the details for that saved login.
4. Click the eye icon. This is what reveals the password text.
5. Confirm your identity. Chrome asks for your device screen lock, biometric confirmation, or Google password before it shows anything.

That last step is the important one. If you’ve turned on on-device encryption, Chrome ties the reveal action to your device’s screen lock — Windows Hello on Windows, or your Mac’s screen lock, per Google’s own settings for biometric password fill. It’s a small bit of friction, but it’s the difference between a password manager that’s locked and one that’s just a list sitting in a menu.

If you only need to use the password rather than read it, you usually don’t need this step at all — Chrome will offer to autofill it directly into the site’s login form the next time you visit.

How Do I Add or Edit a Password Manually in Chrome?

Click “Add” in Google Password Manager, then fill in the website, username, and password fields before saving. This is handy for logins you created somewhere else (on your phone, at a kiosk, or before you started using Chrome) that never got captured automatically.

Editing an existing entry follows the same pattern: open the entry, click Edit, change what needs changing, and save. This is where you’d update a password after you’ve changed it on the actual site, since Chrome doesn’t always catch every password change automatically, particularly on sites with unusual login flows.

• Save to Google Account. Available on any device where you sign in to Chrome; this is the default most people want.
• Save to device only. Stays local to that one computer or phone and never syncs anywhere.
• Import into account later. Moves device-only passwords into your Google Account if you change your mind.

Turn saving back on if you turned it off. If Chrome stopped offering to save new passwords, check Settings inside Password Manager for the “Offer to save passwords and passkeys” toggle, and check the Declined sites list for the specific site.

How Do I Get Chrome to Generate a Strong Password?

Select the password field on a sign-up form and choose “Use strong password” from the suggestion that appears, or right-click the field and pick “Generate password.” Either way, Chrome creates a long, random string rather than something you’d have to think up yourself.

Once generated, Chrome shows you the suggested password and asks you to confirm “Use suggested password.” Accepting it automatically saves the new login to your Google Account, so there’s no separate save step afterward. This matters more than it sounds — a generated password is unique to that one site, which means a breach at one company can’t be used to log into your accounts elsewhere.

This is also the moment worth using deliberately rather than skipping past. It’s tempting to type your usual password into a new sign-up form because it’s faster, but that’s exactly the habit that shows up later as a “reused password” warning in Password Checkup, covered further down. Letting Chrome generate one instead costs you nothing extra in effort, since it fills the field and remembers it for you either way.

If a site doesn’t trigger the suggestion automatically, right-clicking the password field and choosing Generate password works as a manual fallback, and the result still gets saved through the normal prompt.

How Do I Export My Chrome Passwords?

Go to the Settings tab in Google Password Manager and click “Download file” next to “Export Passwords.” Chrome bundles every saved login into a single file you can move elsewhere — useful if you’re switching to a different password manager or just want an offline backup.

The exported file is plain text. Chrome’s password export is an unencrypted CSV file — anyone who opens it can read every password inside. Don’t leave it sitting in a synced cloud folder or an email draft; delete it as soon as you’ve imported it elsewhere.

How Do I Import Passwords Into Chrome Password Manager?

Chrome’s own import option, inside the Settings tab of Google Password Manager, is built for moving passwords you’d previously saved locally on a device into your Google Account. It’s the same screen where export lives, so if you’ve been saving passwords “to this device only,” this is how you fold them into your synced account.

If you’re coming from a different password manager entirely, start with that tool’s own export feature — most password managers can produce a CSV file similar in shape to Chrome’s. From there, check Google Password Manager’s Settings tab for an import option, since the exact interface can shift between Chrome releases and it’s worth confirming what’s on screen for your version before assuming a specific button exists.

Either direction, the file passing between them is the same plain-text CSV format described above, so treat it with the same caution: use it once, confirm everything imported correctly, then delete it. There’s no reason to keep a spare copy of every password you own sitting in a Downloads folder longer than it takes to run the import.

If you manage passwords for a household or a small team and need something more structured than CSV files changing hands, that’s really a different category of tool than what’s covered here — a dedicated shared password manager, not Chrome’s built-in one.

How Do I Run a Password Checkup in Chrome?

Open the Checkup tab inside Google Password Manager and Chrome scans every saved password at once for three problems: whether it’s shown up in a known data breach, whether it’s weak, and whether you’ve reused it across multiple sites. It’s one of the more genuinely useful security tools built into the browser, and it takes seconds to run.

Chrome also runs a broader Safety Check that includes password checkup as one part of a wider scan. You can trigger it manually through Settings > Privacy and security > Safety Check, or it runs automatically in the background.

If Checkup flags a password as compromised, treat it as urgent rather than something to get to eventually — change it on the actual site first, then let Chrome generate a fresh one and save the update. Weak and reused flags are lower urgency but still worth clearing out a few at a time rather than ignoring the list entirely.

Is Chrome’s Password Manager Safe to Use?

Yes, once on-device encryption is set up, since your saved passwords are then locked behind your device’s screen lock or your Google password, and Chrome frames it as meaning only you hold the key to your passwords. That’s a meaningfully different guarantee than a password list sitting unprotected in a settings menu.

Password Manager doesn’t operate in isolation, either. Chrome’s Safe Browsing protection sits alongside it under Settings > Privacy and security > Security, with three levels: Enhanced, Standard (the default), and No protection.

For a fuller walkthrough of these settings and a few more worth checking, see our guide to Chrome browser security. If you want a starting point across your whole setup rather than one browser at a time, our security hub rounds up the related guides.

What Doesn’t Chrome’s Password Manager Protect?

It protects login credentials (passwords and passkeys) and nothing else about your browsing session. That’s an important distinction, because the moment something goes wrong (a crash, a browser update gone sideways, an accidental “close all windows”), passwords are the one thing that survives untouched. Your open tabs are a different story.

Picture the scenario: you’ve got a work login, three research tabs from an hour of digging, a half-filled form, and a video you were partway through. Chrome crashes, or your laptop restarts for an update you forgot about. Your saved passwords are exactly where they were — Google Password Manager doesn’t care about a crash. But those open tabs, that specific combination of windows and groups, might not come back the same way, especially if you’d already closed a window on purpose earlier that day and only later realized you needed it. Chrome’s built-in “reopen closed tab” only goes back so far, and it isn’t built to survive a full crash the way a dedicated tool is. Our guide on what happens when Chrome crashes covers what Chrome’s own recovery can and can’t do.

If you work across more than one browser or computer, it’s also worth knowing that Chrome Sync doesn’t carry open tabs the way people assume. It’s a different mechanism than session recovery entirely. BelayTab’s optional paid Sync ($4/month or $36/year) covers that gap specifically, syncing sessions across browsers you sign in to with 90 days of cloud version history, encrypted in transit and at rest. For a broader look at tools built specifically around saving and restoring tab sessions, see our session manager roundup.

Passwords keep your accounts safe. Sessions keep your work safe. They’re both worth having a real plan for, and neither one substitutes for the other.