If you are tired of resetting passwords you forgot, this guide explains how to use google chrome password manager, the free tool built into Chrome and your Google Account that saves, fills and checks your passwords for you. Once it is set up, Chrome can offer to save a password when you sign in to a website, fill it in automatically the next time you visit, and warn you if that password has appeared in a known data breach. It also supports passkeys, the newer, phishing-resistant way to sign in, and it can sync your saved passwords across desktop, Android and iPhone when you are signed in to Chrome. This guide covers the whole workflow: turning the manager on, saving and autofilling passwords, viewing, editing and deleting them, understanding passkeys, running a password checkup, and the safety habits that keep the convenience from becoming a risk.
how to use google chrome password manager: the basics
Chrome’s password manager is not a separate app you need to download. On desktop it lives inside Chrome’s settings, on Android it lives in Chrome’s settings and in your Google Account, and on iPhone it can work through Chrome and through the device’s own password autofill settings. In all cases it is tied to the Google Account you are signed in with, which is why signing in to Chrome matters. If you use Chrome without signing in, passwords may still be saved locally on that device, but they will not sync to your other devices, and you will not be able to manage them from your Google Account page.
When you sign in to a website for the first time, Chrome usually shows a prompt asking whether to save the password. Tap or click Save, and Chrome stores the username and password securely, linked to that site. The next time you visit the site’s sign-in page, Chrome fills the fields for you, and you only need to confirm, sometimes with your device lock, such as a fingerprint, face recognition or PIN. That device-lock step is important: it means someone who picks up your unlocked phone cannot simply open the manager and read every password, because viewing a saved password generally requires re-authenticating with the device.
The manager also stores passkeys where websites support them. A passkey replaces a password with a cryptographic key pair: the private key stays on your device, and only the public key is shared with the website. When you sign in, your device proves it holds the private key, usually after you unlock it with a fingerprint or face scan. Because there is no password to steal, phish or reuse, passkeys are considerably safer than passwords, and Chrome can save them to your Google Account so they work across your signed-in devices. You will still see passwords for older sites, so think of passkeys as a gradual upgrade, not an overnight replacement.
how to use google chrome password manager on desktop
On a computer, open Chrome and make sure you are signed in. Click your profile picture in the top-right corner and confirm the account shown is the one you want to use. Then open Chrome’s settings, look for the Autofill and passwords section, and open Google Password Manager. This page is the control centre for everything: saved passwords, passkeys, settings for saving and autofilling, and the password checkup tool. Menu names may vary slightly by Chrome version, but the Autofill and passwords area is the place to look.
To make sure saving is turned on, check that the options to offer to save passwords and to sign in automatically are enabled. The offer-to-save option is what produces the prompt when you sign in to a new site. Auto sign-in fills credentials without asking on sites where you have only one saved login, which is convenient but means anyone with access to your unlocked computer could be signed in automatically, so consider turning it off on a shared computer. If you share a computer with family members, separate Chrome profiles are a much better solution than sharing one profile and one password store. Each person gets their own profile, their own saved passwords and their own browsing history.
When you want to sign in to a site, simply visit its sign-in page. If Chrome has a saved password, it will fill the username and password fields, and you click Sign in as normal. If Chrome has saved more than one login for the same site, click the username field and choose the right account from the list. If Chrome does not offer to save a new password, it may be because the site uses an unusual sign-in form, because saving is turned off, or because you previously chose Never for that site. In that case, check the manager’s settings for declined sites and remove the site from that list, then try signing in again.
Viewing, editing and deleting saved passwords on desktop
To view a saved password, open Google Password Manager in Chrome’s settings, find the site in the list, click it, and confirm with your computer’s password, fingerprint or other device lock when asked. Chrome then shows the username and password, and you can copy either one if you need to paste it elsewhere, such as into an app that Chrome cannot autofill. To edit a login, change the username or password on that same details screen and save. To delete it, use the Delete option on the same screen. Deleting is permanent for that account’s synced store, so only delete logins you are sure you no longer need, and consider exporting a backup first if you are doing a large clean-up. Note that exporting passwords creates a plain, readable file, so store it securely and delete it after you have finished with it.
If you have old, duplicated or weak passwords, the manager’s list is a good place to start a tidy-up. Sort through the entries for sites you no longer use and delete them, update passwords for important accounts such as email and banking, and let Chrome suggest a strong password when a site asks you to create a new one. Chrome’s suggested passwords are long, random and unique, which is exactly what you want, and because Chrome saves them immediately, you do not need to memorise them. For readers tightening up the rest of their account at the same time, our guide to securing your Google account covers two-step verification and device checks that pair well with a password clean-up.
how to use google chrome password manager on android
On Android, Chrome’s password manager works hand in hand with your Google Account and with the phone’s autofill service. Open Chrome, tap the three-dot menu, then Settings, then Password Manager. Here you will see saved passwords, passkeys and the settings for saving and autofilling. Make sure the option to offer to save passwords is on, and check that Chrome is set as an autofill service if your phone asks, because that is what lets Chrome fill passwords in other apps and browsers, not just inside Chrome itself.
When you sign in to a site in Chrome on Android, you should see a prompt to save the password, just as on desktop. Tap Save, and the login is stored. The next time you visit, Chrome fills it, and you may need to unlock the phone with a fingerprint or face scan to confirm. If you use apps rather than the browser for services such as banking or shopping, Android’s autofill can offer the matching Chrome-saved login inside the app’s sign-in screen. Tap the suggested login, authenticate with your device lock, and the app signs in. If no suggestion appears, look for an autofill prompt above the keyboard or in the app’s sign-in fields, and check that Chrome or Google is selected as the autofill service in the phone’s system settings.
Viewing a saved password on Android follows the same pattern: open Password Manager in Chrome’s settings, tap the site, authenticate with your fingerprint, PIN or face, and the password is shown. You can edit or delete it from the same screen. One Android-specific tip is to check which Google Account Chrome is using, because many Android phones carry more than one account. Passwords saved under a work account will not appear when you are signed in with a personal account, and vice versa. If a saved password seems to be missing, switching accounts in Chrome is the first thing to check, before assuming it was deleted. Our guide to using the Gemini app on Android is a useful companion read for Android users who want to get more from their Google apps on the same device.
how to use google chrome password manager on iphone
On an iPhone, Chrome’s password manager still works, but Apple handles autofill a little differently. Chrome can save and fill passwords inside Chrome itself, and you can also set Chrome as an autofill provider so it offers saved logins in Safari and in apps. To do that, open the iPhone Settings app, go to Passwords or to General and then Autofill and Passwords, depending on your iOS version, and allow Chrome to provide passwords. Menu names may vary by iOS version, so look for the autofill provider list if the exact wording differs.
Inside Chrome for iOS, open Settings, then Password Manager, to see saved passwords and passkeys. When you sign in to a site, Chrome offers to save the password. Later, when you return to that site, Chrome fills it after you authenticate with Face ID, Touch ID or your device passcode. In Safari or in an app, tap the username or password field, look for the autofill suggestion above the keyboard, choose the Chrome entry, authenticate, and the credentials are filled. If Chrome does not appear as an option, it usually means the autofill provider setting has not been enabled, or you are signed in to Chrome with a different account than the one holding the password.
Passkeys on iPhone work through the same system. When a website offers to create a passkey, you can save it to your Google Account through Chrome or to Apple’s own keychain, depending on the prompt you accept. Either way, signing in later uses your face or fingerprint instead of a typed password. If you use both Android and iPhone, saving passkeys to your Google Account keeps them available on both, whereas saving them only to one device’s keychain may not. When in doubt, check where the passkey was saved in the password manager before relying on it on a second device.
Passkeys: the upgrade worth accepting
Passkeys deserve special attention, because they change the security equation. A traditional password can be phished: a fake sign-in page can trick you into typing it, and a data breach at the website can expose it. A passkey cannot be typed into a fake page in the same way, because the private key never leaves your device and the sign-in is bound to the real website’s identity. Even if a website’s database is breached, the stolen public key is useless without the private key on your device. That is why Google, Apple and Microsoft are all pushing passkeys, and why accepting a passkey offer when a trusted site presents it is generally a good idea.
Creating a passkey is simple. When a site that supports passkeys asks whether you want to create one, accept, authenticate with your device lock, and Chrome saves it to your Google Account. The next time you sign in, choose the passkey option, authenticate, and you are in, with no password to type. If you lose a device, passkeys saved to your Google Account can be recovered by signing in to your account on a new device and authenticating, which is another reason to keep your Google Account itself well protected with two-step verification. Keep a recovery method, such as a recovery phone or email, up to date, because the account that holds your passkeys is now the key to many of your other accounts.
Not every site supports passkeys yet, so you will have a mixed collection for some time: passkeys for newer services, passwords for older ones. That is normal. Use passkeys where they are offered, keep strong unique passwords everywhere else, and let Chrome’s password checkup flag the accounts that most need attention. Do not try to convert everything at once, and do not delete a password for a site until you have confirmed the passkey works for signing in.
Password checkup and fixing weak or reused passwords
Password Checkup is the manager’s built-in health check. It reviews your saved passwords and flags three kinds of problems: passwords that have appeared in known data breaches, passwords that are reused across multiple sites, and passwords that are weak, such as short or common choices. To run it, open Google Password Manager and look for the Checkup option, then let it scan your saved logins. The scan only reports problems; it does not change anything by itself, so you choose which warnings to act on.
Start with breached passwords, because those are the most urgent. If a password has appeared in a breach, change it on that website as soon as possible, and let Chrome save the new one. If you reused the same password elsewhere, change those too, because an attacker who learns one breached password will try it on other sites. Next, tackle reused passwords for important accounts, such as email, banking, shopping and social media, even if they have not been breached. Your email account is the most important of all, because password resets for other services usually go to your email, so a compromised email account can unlock many others. Give it a long, unique password and two-step verification before anything else.
When you change a password on a website, Chrome usually offers to update the saved entry automatically. Accept that offer, and check afterwards in Password Manager that the new password is the one stored. Occasionally a site’s change-password form confuses the manager, and the old password remains saved. If a sign-in fails after a change, open the manager, check the stored password, and edit it manually to the new one. Work through the checkup list in batches rather than all at once, starting with the most important accounts, and repeat the checkup every few months or after news of a major breach.
Sync, safety and common mistakes
Sync is what makes the manager feel effortless, but it is worth understanding. When you are signed in to Chrome with your Google Account and sync is on, your saved passwords and passkeys are available on every device signed in to the same account. Changes on one device, such as a new saved password or a deletion, propagate to the others. That is convenient, but it also means that signing in to Chrome on a borrowed or public computer and leaving sync on can expose your passwords. Never sign in to Chrome on a computer you do not trust, and if you ever do by mistake, sign out and change your Google Account password as soon as you can, then review the devices signed in to your account.
The single most important safety rule is to protect the Google Account itself. Chrome’s password manager is only as secure as that account, so use a strong, unique password for Google, turn on two-step verification, and keep your recovery options current. If someone gains access to your Google Account, they could access your saved passwords, so treat that account as the master key it has become. Avoid the temptation to use the same password for Google as for other sites, because a breach elsewhere would then hand over the master key.
Other common mistakes are easy to avoid. Do not save passwords on a shared device or a shared Chrome profile; use separate profiles instead. Do not export your passwords to a file and leave it on your desktop or in an email, because that file is readable by anyone who finds it. Do not ignore breach warnings for months, especially for email and banking. And do not use Chrome’s manager as your only copy of a critical password without a backup plan: if you ever lose access to your Google Account, you will need its recovery options, not a saved password inside the account you cannot open. For a broader look at keeping your Google services tidy, our Gmail tips guide and Google Drive tips guide cover the accounts that matter most alongside your passwords. Google’s own documentation for the manager is also worth bookmarking at Google Chrome’s password help pages for the latest screens and options.
Key Takeaways
- Chrome’s password manager saves, autofills and checks passwords, and stores passkeys, tied to the Google Account signed in to Chrome.
- Turn on offer-to-save and autofill, use separate Chrome profiles on shared computers, and never sign in to Chrome on a computer you do not trust.
- View, edit or delete a saved password from Password Manager in Chrome’s settings, authenticating with your device lock first.
- Accept passkeys where sites offer them, because they cannot be phished or reused like passwords.
- Run Password Checkup regularly, fix breached passwords first, then reused passwords, starting with email and banking.
- Protect the Google Account itself with a unique password and two-step verification, because it now guards your other accounts.
Frequently Asked Questions
Is Chrome’s password manager free?
Yes. It is built into Chrome and your Google Account at no extra cost, on desktop, Android and iPhone. There is no subscription and no separate app to buy, although third-party password managers with extra features exist if you want them.
Do my passwords sync across all my devices?
They sync across devices signed in to Chrome with the same Google Account when sync is on. If a password seems missing on one device, check that you are signed in with the same account and that sync is enabled before assuming it was deleted.
What happens if I forget my Google Account password?
Use Google’s account recovery process with your recovery phone or email. That is why keeping recovery options up to date matters so much: the account holds your saved passwords and passkeys, so losing it without recovery options is a serious problem.
Are passkeys better than strong passwords?
Yes, in general. Passkeys cannot be phished, guessed or reused, because the private key stays on your device and sign-in requires your device lock. Strong unique passwords are still good, but a passkey removes the main ways passwords fail.
Can someone read my saved passwords if they borrow my phone?
Not easily, if your device lock is on. Viewing a saved password in Chrome’s manager requires authenticating with your fingerprint, face or PIN. That protection only works if you actually use a device lock, so keep one enabled and do not hand over an unlocked device.
Should I still use a separate password manager?
Chrome’s manager covers most people’s needs well. A separate manager may suit you if you want features such as secure notes, family sharing with fine-grained controls, or storage outside the Google ecosystem. Either way, use one manager consistently rather than scattering passwords across several.
Why does Chrome sometimes not offer to save a password?
It may be that saving is turned off, that you previously chose Never for that site, that the site uses an unusual sign-in form, or that you are not signed in to Chrome. Check the manager’s settings and declined-sites list, confirm your signed-in account, and try signing in again.
Conclusion
Learning how to use google chrome password manager turns password chaos into a quiet background habit: Chrome saves each new login, fills it when you return, warns you about breaches, and gradually upgrades you to passkeys where sites support them. Set it up properly on each device, keep your Google Account itself locked down with two-step verification, run a checkup every few months, and fix breached and reused passwords starting with email and banking. Do those few things, and you will spend far less time resetting passwords, and far less time worrying about the ones you have forgotten.
how to use google chrome password manager: quick recap
To recap, learning how to use google chrome password manager starts by signing in to Chrome with the Google Account you want to use.
Once you know how to use google chrome password manager, turn on offer-to-save so Chrome prompts you for each new login.
If you want to know how to use google chrome password manager on a phone, open Chrome settings and then Password Manager.
On a computer, how to use google chrome password manager is just as simple: open Autofill and passwords, then Google Password Manager.
Remember, how to use google chrome password manager also means checking passkeys where sites offer them.
For a tidy routine, review how to use google chrome password manager once a month, and run Password Checkup for breached passwords.
In short, how to use google chrome password manager means saving, autofilling and checking passwords, then protecting the Google Account itself.
That is how to use google chrome password manager without having to remember every password yourself.
how to use google chrome password manager: final checks
Check how to use google chrome password manager after you save, to confirm the new password appears in Password Manager.
If how to use google chrome password manager still shows no saved login, check that you are signed in with the right account.
When you practise how to use google chrome password manager, use the account you use most, then repeat it for other accounts.
Knowing how to use google chrome password manager helps on desktop, Android and iPhone, because the account setting covers all signed-in devices.
Share how to use google chrome password manager with family members who use a shared device, using separate Chrome profiles.
Finally, how to use google chrome password manager works best alongside a strong password and two-step verification for Google.
That final check completes how to use google chrome password manager for this guide.
To summarise again, how to use google chrome password manager is a short settings change with a lasting security benefit.
Use how to use google chrome password manager as part of a monthly security routine, not as a one-off task.
Once you master how to use google chrome password manager, you will spend far less time resetting passwords.