Google Password Manager: Complete Guide to Passwords & Security

Managing dozens of online passwords can quickly become difficult. Using the same password across multiple websites may be convenient, but it also creates a serious security risk: if one service is breached, attackers may try the same credentials on other accounts. Google Password Manager is Google’s built-in password management service that helps users create, save, manage, autofill, and protect passwords and passkeys.

It can store credentials in a Google Account for use across supported devices or keep passwords locally on a device, depending on the configuration.

This guide explains how Google Password Manager works, where saved passwords are stored, how to find and manage them, how Password Checkup works, what passkeys are, how Google protects stored credentials, what happens if you lose a device, and how to make your accounts more secure.

Google Password Manager at a Glance

What Is Google Password Manager?

Google Password Manager is Google’s password and passkey management service integrated with Google Account, Chrome, Android, and supported devices.

It allows you to:

• Create strong and unique passwords
• Save passwords
• Save and manage passkeys
• Autofill passwords on supported websites and apps
• Check saved credentials for security problems
• Change unsafe passwords
• Import and export passwords and passkeys
• Use credentials across supported devices
• Manage password-saving and autofill settings

You can access saved passwords and passkeys through Google Password Manager in Chrome, Android, supported iPhone and iPad configurations, or through passwords.google.com.

Instead of remembering a different password for every website, you can let Google generate and store unique credentials for you.

How Does Google Password Manager Work?

The basic process is straightforward.

When you create an account on a website or app, Chrome or Android can offer to save your username and password. If you accept, the credentials are stored in Google Password Manager according to your storage settings.

When you return to the website, password manager can autofill the saved credentials.

If you’re signed in to Chrome and save passwords to your Google Account, those credentials can be available on supported devices where you’re signed in to the same Google Account.

There is also a device-storage option. When you’re not signed in to Chrome, passwords can be stored locally on the device rather than automatically being saved to your Google Account.

Google Account Storage vs Device Storage

The exact options available can vary according to the device, operating system, browser, account, and settings.

Where Is Google Password Manager?

The easiest way to manage passwords saved to your Google Account is through:

passwords.google.com

You can also access Google Password Manager through Chrome.

On a computer, open Chrome and go to:

More → Passwords and autofill → Google Password Manager

On Android, you can access it through Chrome, Android settings, or the Google Password Manager app where available. Google currently provides a dedicated Google Password Manager app on supported Android devices.

Once inside Google Password Manager, you can view saved passwords and passkeys, run security checks, change credentials, and adjust relevant settings.

Is There a Google Password Manager App?

Yes. Google provides Google Password Manager functionality through Android, Chrome, and the Google Password Manager app on supported Android configurations.

Google’s current Android documentation provides instructions for downloading the Google Password Manager app from Google Play.

However, you do not necessarily need a separate app to manage your credentials. You can also access Google Password Manager through Chrome and passwords.google.com.

This is useful to understand because some people search for a standalone “Google Password Manager app” when the functionality is already integrated into their device or browser.

How to Save a Password With Google Password Manager

When you sign in to a website for the first time, Chrome may ask whether you want to save the password.

If you accept, the credential is added to Google Password Manager according to your configured storage settings.

Google Password Manager can also suggest strong and unique passwords when you create an account or change an existing password. Google specifically recommends unique passwords because reusing the same password across services increases the damage caused by a single credential compromise.

Why Unique Passwords Matter

Consider this example.

You use the same password for:

• Email
• Online shopping
• Social media
• Banking
• Cloud storage

If one website suffers a breach and your password is exposed, attackers may try the same username and password combination against your other accounts.

A password manager makes unique passwords practical because you don’t need to memorize every credential.

How to Find Saved Passwords

To view passwords stored in your Google Account:

1. Go to passwords.google.com.
2. Sign in to your Google Account.
3. Find the website or app.
4. Select the saved account.
5. Authenticate if required.
6. View or manage the saved credential.

You can also access saved passwords through Google Password Manager in Chrome.

Depending on your device and security settings, you may need to authenticate before viewing or changing a saved password.

How to View a Saved Password

To view a saved password:

1. Open Google Password Manager.
2. Find the website or app.
3. Select the saved account.
4. Authenticate if requested.
5. Select the option to reveal or view the password.

Avoid displaying passwords where another person can see your screen.

If you’re using a shared computer, do not leave your Google Account signed in for other people to use.

How to Edit a Saved Password

If you change a password on a website, make sure the saved credential is updated as well.

Generally:

1. Open Google Password Manager.
2. Select the relevant website.
3. Select the saved credential.
4. Edit the password information.
5. Save the changes.

If the website has changed its login system or domain, you may need to remove the old entry and save the new credentials.

How to Delete a Saved Password

You can delete individual credentials from Google Password Manager.

On the web:

1. Open Google Password Manager.
2. Select the saved website.
3. Choose Delete.
4. Confirm if prompted.

Google also provides options for managing or deleting stored password data.

Important: Deleting a Password Does Not Delete the Account

Deleting a credential from Google Password Manager does not normally delete your account on the website.

For example, if you delete your Facebook password from Google Password Manager, your Facebook account still exists.

You are only removing the saved login information from the password manager. To delete the online account itself, you must use that service’s account-deletion process.

How to Turn Password Saving On or Off

Google Password Manager can offer to save passwords and create or save passkeys when you sign in to websites and apps.

You can control these offers through Google Password Manager and Chrome settings.

On Android, the exact menu can vary by device, but you can generally:

1. Open Settings or Chrome.
2. Open Password Manager.
3. Select its settings.
4. Adjust the password-saving or passkey options.

Chrome and Google Account settings can also provide controls for saved-password behavior.

You can also prevent password-saving prompts on specific websites when supported.

What Is Password Checkup?

Password Checkup helps identify saved passwords that are:

• Compromised
• Weak
• Reused

It can recommend changing passwords linked to known security problems.

How to Run Password Checkup

1. Go to passwords.google.com.
2. Select Password Checkup.
3. Choose Check passwords.
4. Review the results and change unsafe credentials.

You can also access Password Checkup through Google Password Manager in Chrome.

What to Do After a Warning

If a password is compromised:

1. Change it immediately.
2. Create a unique replacement.
3. Change it anywhere else it was reused.
4. Check the account for suspicious activity.
5. Enable 2FA or a passkey where available.

How Google Checks for Compromised Passwords

Google’s Chrome documentation describes protections used when checking credentials against known compromised information.

Chrome encrypts credentials before they are used in the breach-checking process. Google says its system can compare protected information against an encrypted list of known breached data without learning the username or password being checked.

This is different from simply sending your password to a public breach database.

The purpose of the process is to identify potentially compromised credentials while protecting the actual credential during the check.

Does Google See My Saved Passwords?

This is an important privacy question.

Google Password Manager uses encryption to protect stored passwords and passkeys. Google states that saved data is protected with encryption, while some Google Password Manager functionality also involves diagnostic and analytics information such as page views, taps, crash logs, and diagnostics.

For breach checking, Google says Chrome encrypts credentials before comparing them against protected information and that Google does not learn the username or password during that comparison.

For users who want additional protection, Google provides an on-device encryption option for supported configurations.

Google Password Manager vs. Google Account Security

Google Password Manager helps protect the credentials you store, but it does not replace the security controls for your Google Account. If you save passwords to your Google Account, protecting that account becomes a critical part of protecting your password collection.

Think of the two layers this way:

• Google Password Manager: Stores, generates, autofills, and checks credentials.
• Google Account security: Protects access to the account that may contain your synchronized credentials.
• Device security: Protects credentials and passkeys available on the physical device.

For the strongest setup, secure all three layers with a strong unique Google Account password, 2-Step Verification, current recovery information, a strong device lock, and timely security updates.

Is Google Password Manager Safe?

Google Password Manager is designed with multiple security protections, but no password manager should be considered completely risk-free.

Google says saved passwords and passkeys are protected by encryption and recommends adding recovery information and enabling 2-Step Verification.

The biggest practical security consideration is your Google Account and your physical devices.

If an attacker gains access to your Google Account, they could potentially gain access to credentials stored there.

Similarly, if someone can unlock a device containing credentials or passkeys, they may be able to use those credentials.

That’s why password-manager security should always be considered together with Google Account security and device security.

How to Make Google Password Manager More Secure

For stronger overall protection:

• Use a strong, unique Google Account password.
• Turn on 2-Step Verification.
• Add current recovery information.
• Use passkeys where appropriate.
• Keep Chrome and your operating system updated.
• Use a secure screen lock.
• Avoid unknown browser extensions.
• Review Google Account security activity.
• Respond quickly to compromised-password warnings.
• Avoid using password managers on shared or untrusted devices.

What Is On-Device Encryption?

Google Password Manager supports on-device encryption for supported configurations.

With on-device encryption, passwords can be encrypted on your device before being stored in Google Password Manager. Google describes this as an additional protection method in which only you have the key needed to unlock the encrypted password data.

This can provide stronger protection for stored credentials.

However, there is an important trade-off: stronger encryption can make recovery more dependent on the authentication method or recovery mechanism associated with your setup.

Before enabling a security feature, make sure you understand how you will regain access if you lose a device or authentication credential.

What Are Passkeys in Google Password Manager?

Passwords are no longer the only type of credential supported by Google Password Manager.

Passkeys are a passwordless authentication technology designed to make sign-in easier and more resistant to phishing.

Instead of typing a password, you can authenticate using a device’s:

• Fingerprint
• Face scan
• PIN
• Screen lock
• Other supported device authentication

Google says passkeys are tied to the website or service where they are created, which helps protect against phishing.

Passwords vs. Passkeys

Passkeys are increasingly becoming an important alternative to passwords, although not every website or service supports them yet.

Are Passkeys More Secure Than Passwords?

For many sign-in scenarios, passkeys offer important security advantages.

A traditional password can be:

• Guessed
• Reused
• Phished
• Copied
• Stolen
• Exposed in a data breach

Passkeys use cryptographic credentials associated with a specific service.

Google says passkeys provide stronger protection against phishing because they are associated with the website or app for which they were created. Google also says biometric information used to unlock a passkey stays on the device and isn’t shared with Google.

Important Passkey Warning

Only create passkeys on devices you personally own and regularly use.

Google specifically warns that if you create a passkey on a device, anyone who can unlock that device may be able to access your Google Account.

For that reason, avoid creating account passkeys on:

• Public computers
• Shared family devices
• Work devices you don’t personally control
• Borrowed phones
• Other people’s devices

Where Are Passkeys Stored and How Do They Sync?

Passkeys use cryptographic credentials rather than a password that you type and memorize. Depending on the platform and configuration, a passkey may be stored and managed by a supported password manager or credential system and made available across compatible devices.

The important distinction is that the private cryptographic credential is protected by the device or credential-management system rather than being displayed to a website as a reusable password. When you sign in, your device authenticates you and uses the passkey to complete the sign-in process.

Synchronization and recovery depend on the platform, Google Account, device, and passkey provider. Before relying on passkeys for important accounts, make sure you have a secure way to regain access if you lose a device.

What Happens If You Lose a Phone With a Passkey?

Losing a phone containing passwords or passkeys can be stressful, but there are steps you can take.

If you lose a device:

1. Secure your Google Account from another trusted device.
2. Review the devices signed in to your account.
3. Sign out of the lost device when appropriate.
4. Remove passkeys associated with the lost device.
5. Change important passwords if you believe the device or account was compromised.
6. Review recent security activity.

Google provides controls for removing passkeys from the Google Account. You can go to your Google Account’s security settings, find Passkeys and security keys, and remove the relevant passkey.

For automatically created Android passkeys, Google also provides device-management controls for signing out devices.

What If Someone Knows Your Phone’s PIN?

This is particularly important.

If another person knows your device PIN or can otherwise unlock your device, the security of credentials protected by that device can be affected.

A strong device lock is therefore an essential part of password-manager security.

How Google Password Manager Works Across Devices

One major advantage is cross-device access.

When passwords and passkeys are saved to your Google Account, you can use them on supported devices where you’re signed in with the same account.

For example:

1. Save a password on your Android phone.
2. Sign in to Chrome on your computer.
3. Use the same Google Account.
4. Access the saved credential through Google Password Manager.

This eliminates the need to manually transfer credentials every time you switch devices.

However, synchronization depends on your Google Account, device, browser, operating system, and settings.

How Many Passwords Can Google Password Manager Store?

Google’s current documentation says you can store up to 10,000 passwords in your Google Account.

For CSV imports, Google currently allows up to 3,000 passwords per import. If you have more than 3,000 passwords to import, Google recommends splitting them into multiple CSV files.

These limits are useful to know when migrating a large password collection from another service.

Google Password Manager on Android

Google Password Manager is deeply integrated into Android.

Android users can access saved credentials through Google services, Chrome, Android settings, and the Google Password Manager app where supported.

Passwords can be used for autofill, while passkeys can provide passwordless authentication on compatible devices.

Google also uses Android’s device screen lock to protect access to passwords and passkeys in relevant scenarios.

Because the phone itself can be part of the authentication process, keeping Android protected with a strong screen lock is important.

How to Choose Google as the Autofill Provider on Android

If another password manager is handling autofill, Google Password Manager may not automatically fill credentials.

Check your Android settings and make sure Google is selected as the password/autofill provider where appropriate.

The exact menu can differ between Android manufacturers and versions.

Google Password Manager on iPhone and iPad

Google Password Manager can also be used on iPhone and iPad through Chrome and Google services.

Google’s current iPhone documentation explains that users can configure Google and Chrome for password and passkey autofill.

On supported iPhones:

1. Open Settings.
2. Select General.
3. Select Autofill & Passwords.
4. Turn on Autofill Passwords & Passkeys.
5. Under Autofill From, enable Google Chrome and Google.

Google also documents the ability to select a default password manager under Settings → Apps → Default Apps → Passwords & Codes on supported iOS versions.

Menu names can vary depending on the iOS version.

Google Password Manager on a Computer

On a computer, Chrome provides direct access to Google Password Manager.

Open:

Chrome → More → Passwords and autofill → Google Password Manager

You can also access credentials saved to your Google Account through passwords.google.com using a supported web browser.

The web interface is particularly useful for reviewing many saved passwords, running Password Checkup, changing credentials, and managing settings.

Can You Import Passwords Into Google Password Manager?

Yes. Google Password Manager supports importing passwords from other password managers and browsers, typically using CSV files.

Common fields include:

• url
• username
• password

Google currently documents up to 3,000 passwords per import and 10,000 passwords stored in a Google Account.

How to Import Passwords

1. Export passwords from your old password manager.
2. Convert the file to CSV if required.
3. Open Google Password Manager and select Import.
4. Choose the CSV file and complete the import.
5. Verify important credentials and run Password Checkup.
6. Securely delete the CSV file afterward.

Critical CSV Security Warning

CSV password files contain sensitive credentials. Don’t leave them in Downloads, cloud storage, email, shared computers, or USB drives.

Delete the CSV securely after completing the import.

Can You Import Passkeys?

Yes, Google currently documents importing passwords and passkeys from supported password-management apps on Android.

The process can require authentication and may involve the original password manager’s recovery or authentication mechanism.

Passkey migration can be more complicated than password migration because passkeys use cryptographic credentials rather than simple username-and-password fields.

Before migrating, check whether your existing password manager supports direct passkey export or transfer.

Can You Export Passwords From Google Password Manager?

Yes.

Google Password Manager can export passwords and, on supported configurations, passkeys for migration to another password manager.

Exporting can be useful when:

• Moving to another password manager
• Migrating to a new ecosystem
• Creating a controlled backup
• Transferring credentials

But exported credentials are extremely sensitive.

Anyone who obtains an unprotected password export may be able to access many of your accounts.

Never casually share or upload a password-export file.

After completing a migration, securely remove unnecessary copies.

Google Password Manager Autofill

Autofill is one of the main reasons people use a password manager.

Instead of manually entering a username and password, Google Password Manager can fill saved credentials into supported websites and apps.

This makes it easier to use long, random passwords without memorizing them.

It also reduces the temptation to create short or predictable passwords simply because they’re easier to type.

What If Google Password Manager Doesn’t Autofill?

Several issues can prevent autofill from working.

1. Check Whether the Password Is Saved

Open Google Password Manager and search for the website or app.

If no credential exists, there is nothing for autofill to use.

2. Check Your Google Account

If you use multiple Google Accounts, make sure the password was saved to the correct account.

Android can prompt users to choose which Google Account should store a password when multiple accounts are present.

3. Check Your Autofill Provider

Another password manager may be configured as the default provider.

Check your Android or iPhone autofill settings and make sure Google is enabled if you want Google Password Manager to provide the credentials.

4. Check the Website or App

Some websites use unusual authentication systems that may interfere with standard autofill.

5. Update Chrome

Make sure Chrome and your operating system are updated.

6. Check Whether You Are Using Incognito Mode

Some password and passkey features can behave differently in private or Incognito browsing modes.

7. Look for Duplicate Credentials

If several entries exist for the same service, verify that you’re using the current username and password.

Why Isn’t My Saved Password Showing Up?

If you know a password was saved but cannot find it, check:

• The correct Google Account
• The website’s name or domain
• Whether the password was saved locally rather than to your Google Account
• Whether another password manager was used
• Whether the credential was deleted
• Whether you are looking on the same device where it was stored
• Whether synchronization is enabled

Google explains that passwords can be stored either in the Google Account or locally on a device depending on the sign-in and Chrome configuration.

This distinction is often the reason users believe a saved password has disappeared.

What Happens If You Forget a Google Password Manager PIN?

On some devices and configurations, Google Password Manager uses a PIN or another authentication mechanism to protect passkeys.

Google documents a Google Password Manager PIN for certain computers and iOS configurations. Android uses the device’s screen lock in relevant cases.

If you forget the PIN, the available recovery process depends on the device and configuration.

Keep your account recovery information and device authentication methods secure and accessible.

What Happens If Your Phone Is Lost or Stolen?

If your phone is lost or stolen, don’t wait to review your account security.

Take these steps:

1. Sign in to your Google Account from a trusted device.
2. Review devices with account access.
3. Sign out of the lost device when appropriate.
4. Remove passkeys associated with the lost device.
5. Change important credentials if you believe the device was accessed.
6. Review recent security activity.
7. Contact your mobile provider if your SIM or phone number is at risk.

Google provides tools for reviewing devices and removing passkeys from your account.

The most important point is that a lost device is not automatically equivalent to a compromised account, particularly when the device is protected by a strong lock. But you should still act quickly.

Google Password Manager vs. Browser Password Saving

Google Password Manager is closely integrated with Chrome, but there is an important distinction between saving credentials locally and saving them to your Google Account.

When you’re signed in to Chrome and save credentials to your Google Account, they can be available across supported devices.

When you’re not signed in to Chrome, Chrome can store passwords locally on the device.

For users who regularly switch between devices, Google Account storage is generally more convenient.

For users who prefer local storage, device storage may be preferable depending on their privacy and workflow requirements.

Google Password Manager vs. Third-Party Password Managers

Google Password Manager isn’t the only option. Dedicated password managers may offer advanced organization, password sharing, emergency access, administrative controls, and broader platform support.

Google Password Manager is especially convenient for people who already use Chrome, Android, and Google services because it requires little additional setup.

Who Should Choose Google Password Manager?

It is a good choice if you:

• Use Android and Chrome
• Already have a Google Account
• Want simple password generation and autofill
• Want Password Checkup and passkey support
• Don’t need advanced sharing features

Who Might Prefer a Dedicated Password Manager?

A dedicated service may be better if you:

• Need family or business password sharing
• Want advanced administrative controls
• Need emergency-access features
• Use many different platforms
• Want advanced organization or auditing

Neither option is best for everyone; the right choice depends on your needs.

Is Google Password Manager Free?

Google Password Manager’s core password-management functionality does not require a separate premium password-manager subscription.

That makes it an attractive option for people who already use Google services.

However, Google Password Manager should not be confused with other Google products that may have separate storage or subscription costs.

Advantages of Google Password Manager

• Easy to Use: Integrated with Chrome, Android, and Google services.
• Strong Password Generation: Creates strong, unique passwords.
• Password Checkup: Detects compromised, weak, and reused passwords.
• Cross-Device Access: Syncs credentials across supported devices.
• Passkey Support: Supports modern, passwordless sign-ins.
• Encryption: Protects saved credentials with encryption.
• Large Storage Capacity: Supports up to 10,000 passwords in a Google Account.

Disadvantages and Limitations

• Google Account Dependency: A compromised account can put stored credentials at risk.
• Fewer Advanced Features: Dedicated managers may offer better sharing and organization.
• Device Compatibility: Features vary by device and browser.
• Recovery Matters: Secure recovery options are important.
• Export Risks: Password exports must be protected and deleted securely.
• Device Security: Passkeys depend on protecting the device.

Best Security Practices

1. Use a unique password for every important account.
2. Enable 2-Step Verification.
3. Use passkeys where available.
4. Keep devices protected with a strong screen lock.
5. Run Password Checkup regularly.
6. Change compromised passwords immediately.
7. Keep Chrome and your devices updated.
8. Install only trusted browser extensions.
9. Keep recovery information current.
10. Securely delete password-export files.
11. Create passkeys only on trusted devices.
12. Review and remove unused devices regularly.

Google Password Manager Security Checklist

• Strong, unique Google Account password
• 2-Step Verification enabled
• Current recovery information
• Password Checkup completed
• Compromised, weak, and reused passwords replaced
• Passkeys used on trusted devices
• Device screen lock enabled
• Chrome updated
• Unnecessary extensions removed
• Unused devices signed out
• Password exports securely deleted
• Google Account security activity reviewed

Google Password Manager FAQs

1. Is Google Password Manager safe to use?

Yes. It uses encryption, security checks, and passkey support to help protect your credentials. You should also secure your Google Account with 2-Step Verification and recovery options.

2. Where does Google Password Manager store my passwords?

Passwords can be stored in your Google Account for access across supported devices or locally on your device, depending on your settings.

3. How do I see my saved passwords?

Go to passwords.google.com, sign in, and select the credential you want to view. You can also access saved passwords through Chrome.

4. How does Password Checkup protect my accounts?

Password Checkup identifies saved passwords that are compromised, weak, or reused, helping you know which credentials should be changed.

5. Does Google Password Manager support passkeys?

Yes. It supports passkeys on compatible devices. Passkeys can use a fingerprint, face scan, PIN, or screen lock for authentication.

6. Can I use Google Password Manager on multiple devices?

Yes. Passwords and passkeys saved to your Google Account can be available across supported devices signed in to the same account.

7. What should I do if my phone is lost?

Secure your Google Account from another trusted device, review signed-in devices, sign out of the lost phone when appropriate, and remove associated passkeys.

8. Should I create a passkey on a shared computer?

No. Create passkeys only on trusted personal devices because anyone who can unlock the device may be able to access the associated account.

Final Thoughts: Is Google Password Manager Worth Using?

For most Chrome and Android users, Google Password Manager is a practical way to improve password security without adding much complexity.

Its biggest strengths are convenience, password generation, autofill, Password Checkup, cross-device access, encryption, and passkey support.

It is particularly useful for people who want a straightforward password manager without paying for a separate premium service.

The most important point is that a password manager is not a substitute for good account security.

Use unique passwords, enable 2-Step Verification, protect your devices, review Password Checkup results, and use passkeys where appropriate.

If you already use Chrome or Android, Google Password Manager provides an easy starting point for moving away from password reuse and toward stronger, more modern authentication.

Mercy

Mercy is a passionate writer at Startup Editor, covering business, entrepreneurship, technology, fashion, and legal insights. She delivers well-researched, engaging content that empowers startups and professionals. With expertise in market trends and legal frameworks, Mercy simplifies complex topics, providing actionable insights and strategies for business growth and success.

See Full Bio