Advice Needed on Chrome Saved Passwords

[silkstone]

Hi, I need a bit of info on how Chrome works on android to figure out if I need to change all of my passwords that are saved by Chrome.

Long story short. I removed a phone from my google account about a year ago, but did not wipe that phone. Now, If someone else has access to that phone (and I have changed my Google Account Password) can they still open up Chrome to see all of my bookmarks and Saved passwords?

I've trying to find the info online, but I'm getting conflicting info. My gut feeling is that you are logged out from chrome and have to resign in to use it, but I know that doesn't happen on a computer.

I can't delete the data remotely as the phone itself associated with my Google account any more and I used a local sync with passphrase for my Chrome Data.

I have already changed my most essential passwords, those that don't have 2FA and such. I know that I really should go through all of the passwords saved in chrome and change them, just in case, but I don't have the time. And, if disassociating that phone from the Google Account before they had access meant that they couldn't access my chrome info, then I'll not need to.

Thanks for any help.

 

[bonehead123]

nuke everything, like, yesterday

better safe than sorry !

why in the world would you get rid of a phone and NOT wipe it anyways ?????????????????

 

[silkstone]

nuke everything, like, yesterday

better safe than sorry !

why in the world would you get rid of a phone and NOT wipe it anyways ?????????????????

Long story. It was a phone that died and I sent in for warranty replacement. I got it replaced and unlinked everything, never thought any more about it.

They must ahve eventually been able to fix it as the other day I get a call asking for my Xiaomi account password so they can log in and reset the phone so I give them a temporary password that I change 5 mins later, but then realize that I had Chrome installed on the phone as well as some other apps. I changed the passwords to any accounts that are linked to apps that could be on the phone, but then realize that I would have also linked chrome.
I thought that disassociating the phone from my google account and changing the password would force you to re-login to Chrome, Gmail, Etc. But, now I'm not so sure.

 

[Gorstak]

you can simply set a sync password...they wont get anything even if they log in with your password, since sync password can be different...

 

[silkstone]

you can simply set a sync password...they wont get anything even if they log in with your password, since sync password can be different...

Yeah. It was already set and changed.

That is the issue, I think. The sync password is locally stored and kept to unlock the data. I'm not sure whether they will still have access as nothing goes via google servers to be able to revoke access.

 

[Bill_Bright]

to figure out if I need to change all of my passwords that are saved by Chrome.

If you have even the tiniest inkling any of your passwords might have been or will be compromised (especially if you use the same PW on multiple sites), change them. Period! It does not matter what browser or OS or device you are using.

And then stop using your browser to save your passwords. While Chrome's manager is one of the better browser integrated passwords managers, using a stand-alone password manager is the more secure option (even if a little less convenient). See, Sorry But Your Browser Password Manager Probably Isn't Enough.

 

[Gorstak]

Yeah. It was already set and changed.

That is the issue, I think. The sync password is locally stored and kept to unlock the data. I'm not sure whether they will still have access as nothing goes via google servers to be able to revoke access.

Save a copy of your data, delete all your data, set sync password again, import your data

 

[silkstone]

If you have even the tiniest inkling any of your passwords might have been or will be compromised (especially if you use the same PW on multiple sites), change them. Period! It does not matter what browser or OS or device you are using.

And then stop using your browser to save your passwords. While Chrome's manager is one of the better browser integrated passwords managers, using a stand-alone password manager is the more secure option (even if a little less convenient). See, Sorry But Your Browser Password Manager Probably Isn't Enough.

If you have even the tiniest inkling any of your passwords might have been or will be compromised (especially if you use the same PW on multiple sites), change them. Period! It does not matter what browser or OS or device you are using.

And then stop using your browser to save your passwords. While Chrome's manager is one of the better browser integrated passwords managers, using a stand-alone password manager is the more secure option (even if a little less convenient). See, Sorry But Your Browser Password Manager Probably Isn't Enough.

I do use a password manager also. The passwords that chrome has saved are generally for forums or low-risk sites or sites where 2FA is set up. But there are a few for sites like Amazon and E-bay (which I have changed already).

I guess I'll start slowly working my way through the list.

 

[R-T-B]

I guess I'll start slowly working my way through the list.

Good luck on your long journey, my friend.