9

Is there a way to disable all access to saved passwords in Google Chrome in a secure way such that no one else can re-enable access to them?

For example, say that I am allowing someone else to use my computer. Is there a way to prevent that person from logging into sites using my credentials?

1
  • 1
    Highly related: Is it still possible to lock or password-protect Chrome profiles? Although I would recommend a different OS account if there could be anything at all on the rest of your computer you might not want them to see and not letting them use your computer at all unless you trust them to not maliciously or accidentally do anything potentially harmful. – NotThatGuy Apr 21 at 12:30
39

Don't try to solve this through Chrome. Create a new OS-level account for the other person, then just don't give them your main OS password. This way, the other person will have no access to your Chrome settings at all (even to the actual files which store your passwords) – all programs will start from fresh state.

(This is literally the purpose of OS accounts, after all.)

  • On Windows 10, additional accounts are available through Settings → Accounts → Family & other users → Other users → Add someone else to this PC → I don't have their sign-in information → Add a user without a Microsoft account.

    Alternatively: Run control userpasswordsManage another accountAdd a user accountSign in without a Microsoft accountLocal account.

    After the new accounts are created, you can switch between them through the Start menu, or by pressing WindowsL to lock the current desktop.


    (Note: It's fine to choose "Microsoft account" if that person actually has one, e.g. if they're using OneDrive cloud storage or Outlook.com mail... most people don't have one, though.)

  • On Windows 7/Vista/XP use the same control userpasswords (or control userpasswords2).

  • On macOS, see https://support.apple.com/guide/mac-help/set-up-other-users-on-your-mac-mtusr001/mac.

  • On some Android phones, see https://support.google.com/pixelphone/topic/7083408.

  • On Linux, useradd -m name followed by passwd name.

8
  • 5
    Version of Windows prior to Windows 10 had guest accounts, that would probably make more sense if they're just using your computer once or rarely. – NotThatGuy Apr 21 at 12:36
  • 2
    Importantly, this also protects your cookies, which means the guest also won't be able to access any sites you're already signed in to. – josh3736 Apr 21 at 22:00
  • 2
    You really need to mention that this only works if the user's folders/files are encrypted. In Linux for example you can trivially access another user's files if you have physical access to the machine unless their home folder is encrypted. I have no idea if encryption is the default for new user accounts on Windows/macOS but your suggested method for Linux doesn't result in any encryption. – Jon Bentley Apr 22 at 9:39
  • 3
    @JonBentley In Windows, folders are not encrypted, but Chrome passwords are (with user credentials), thereby if you even can access other user password file (not so easy for non-admins), you can't get passwords out there anyway. – Arvo Apr 22 at 14:00
  • 4
    @Arvo They aren't encrypted with user credentials. They are protected by DPAPI in "LocalMachine" scope, which means any user on the device will be able to decrypt them – nobody Apr 22 at 15:26

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.