Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I noticed that my notebook has synchronized not only my Chrome bookmarks, but also my passwords to sites. This can't be done on demand, because my other computer can be turned off. And this can't be done encrypted, because browsers can't send passwords if encrypted.

The means that Chrome is sending my passwords to Google.

How can I prevent this?

In other words, how can I prevent any uploading of my passwords to Google servers both relying on Chrome's good will and independently.

I.e. I want some blocking software, which blocks password transform to internet.

UPDATE

The question about "password firewall" software is still opened. I want neither application be able to send my passwords anywhere without explicit permission.

share|improve this question
2  
Why can't it be done encrypted? Chrome uses your Google account credentials to encrypt the passwords. They are sent to Google servers, but they are encrypted. You can also encrypt with a separate passphrase. –  Paul Nov 25 '13 at 1:26
1  
note that you cannot depend on google's good will, because such good will is forbidden by law. en.wikipedia.org/wiki/… en.wikipedia.org/wiki/FISA_Amendments_Act –  Frank Thomas Nov 25 '13 at 1:53
    
@Paul passwords are encrypted, but Google knows the keys, since it can decrypt is on synced browser. So, Google knows all my passwords to all my sites and it does this without any warnings, by default. I think it is no sense to disable the feature aftewards, because all password are already uploaded to Google. –  Dims Nov 25 '13 at 17:17
    
@FrankThomas sorry didn't understand, I am bad with legal mambo-yambo language. Can you explain? –  Dims Nov 25 '13 at 17:18
1  
this may get a little off topic, but my point is that entities in a number of countries have the legal authority to demand any information that a company possess about you. my point was simply that no matter how well intentioned a company is it can no longer secure anything you give it, so your best bet in protecting yourself is to give it nothing, even if that means you have less integration across products and services. Trust No One. –  Frank Thomas Nov 25 '13 at 17:20
show 4 more comments

3 Answers

1: Click the enter image description here(Chrome menu) on the browser toolbar.

2: Select Signed in as your email address (you must be signed in to Chrome already). In the "Sign in" section, click Advanced sync settings.

3: Choose an encryption option:

4: Encrypt synced passwords with your Google credentials: This is the default option. Your saved passwords are encrypted on Google's servers and protected with your Google Account credentials.

5: Encrypt all synced data with your own sync passphrase: Select this if you'd like to encrypt all the data you've chosen to sync. You can provide your own passphrase that will only be stored on your computer.

Click OK.

Note: If you forget your passphrase, you’ll need to reset sync via the Google Dashboard. This will delete all synced data from Google’s servers and disconnect all synced computers and devices, but not the data that’s on your computers or devices. So your current preferences, bookmarks, and passwords will remain available in the browser. You can then re-enable sync with a new passphrase.

For more information see this support section.

share|improve this answer
add comment

Just access the "Advanced Sync Settings" in the Settings page, or just type about:settings.

Select "Choose what to sync", disable all the elements that you don't want google to know about.

enter image description here

Done.

Source:

The question about "password firewall" software is still opened. I want neither application be able to send my passwords anywhere without explicit permission.

This depends greatly in how the applications are made. The question only gives Google Chrome as reference, and there are enough methods here.

share|improve this answer
    
Sorry, where is this page? What is Chromebook this link is about? I am interested in Google Chrome Web Browser. –  Dims Nov 25 '13 at 15:21
    
@Dims through the link is about a "chromebook" the same applies to any version of Chrome/ium. I've added screenshots to help and a shortcut. –  Braiam Nov 25 '13 at 16:02
add comment

I noticed that my notebook has synchronized not only my Chrome bookmarks, but also my passwords to sites. … How can I prevent this?

Just turn off the Password setting in the Sync configuration page (chrome://settings/syncSetup):

Screenshot of Chrome Synch page with passwords entry turned off

I.e. I want some blocking software, which blocks password transform to internet.

What you want is a firewall that can do deep-packet inspection. I doubt there’s anything that can detect this specifically, but any firewall that can do DPI can be configured to detect whatever you want, including passwords. The specific steps to do that would depend on the program you end up choosing. Either way, if the password is encrypted, then even a firewall would be unable to detect if it is a password that is being transmitted.

share|improve this answer
    
Moreover: most probably Chrome communicating with it's server via HTTPS, so encryption is very strong and DPI can't help. What I need is something like antivirus software, which intercepts traffic on OS level and checks presence of passwords there. –  Dims Nov 25 '13 at 17:55
2  
> What I need is something like antivirus software, which intercepts traffic on OS level and checks presence of passwords there. @Dims, that statement is (almost) meaningless. What you are asking would require a program that hacks the OS to observe the memory of other programs and search for strings that you specify (which would mean giving a list of all your passwords—unencrypted—to the program!) I can’t imagine that such a program would exist. Have you tried simply turning the password syncing function off? ಠ_ఠ It’s so much simpler and more efficient. –  Synetech Nov 25 '13 at 19:48
1  
@Dims, just in case you are misunderstanding, un-checking the Passwords field in the Sync dialog only disables password syncing (sending to Google), it does not disable password saving which is a completely different setting. –  Synetech Nov 26 '13 at 1:21
1  
@hit-and-run-down-voter, what’s the problem? This perfectly answers the question that was asked. Either explain what the problem is, or stow your sour grapes (which is likely the case since you did not down-vote any other answers, even ones that didn’t actually solve the problem). ◔_◔ –  Synetech Nov 26 '13 at 1:21
    
Downvoter you should shame for this, this is the answer which resolve the issue from root. However my answer cover some part with encryption but not the all after update of OP until he didn't updated my answer was sufficient enough though. –  avirk Nov 26 '13 at 8:14
show 1 more comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.