Securing Google Password Manager with On-Device Encryption

Want to keep your saved passwords even more secure? You can use on-device encryption in Google Password Manager! This extra layer of protection means only you can access your passwords, even if someone else gains access to your Google account. Google Password Manager is a handy tool for managing passwords, offering features like storing, auto-filling, and generating strong passwords. When you enable on-device encryption, you’re taking your password security to the next level.

What’s on-device encryption all about?

On-device encryption means your passwords are encrypted directly on your device before they’re stored with Google Password Manager. This is super important because it means the encryption key stays with you. Neither Google, nor anyone else can access your passwords without this key. Normally, Google encrypts your passwords using their keys which are linked to your Google account. On-device encryption shifts that key management to you.

Think of it like this: encryption scrambles your password information into unreadable data. With standard Google encryption, Google can decrypt your passwords when needed, such as when you log into a site or run a password check. But on-device encryption requires your key to unlock that scrambled data. This key could be your Google account password or your device’s screen lock, depending on your device.

Keep this in mind: if you lose your encryption key, you will lose access to your passwords! Also, this is a one-way street; once you turn on on-device encryption, you can’t turn it off.

Important Note: Once you enable on-device encryption for your passwords, you cannot disable the feature.

Enabling on-device encryption also changes how you use your passwords. Some sites might not automatically log you in, and Google can’t automatically perform Password Checkups to evaluate the strength of your passwords. You’ll need to manually do that to ensure your passwords are still secure.

How to enable on-device encryption

You can enable on-device encryption on both desktop and mobile devices. Here’s how you do it on your desktop:

  1. Open up Google Chrome on your computer. Look for the three-dot menu icon in the upper-right corner of the browser and give it a click.
    Three dots menu

  2. In the dropdown menu, select Settings.

  3. In the Settings page, locate and click on Manage your Google Account.

  4. Your Google Account settings will now be open in a new tab. In the navigation menu on the left, find and select Security.
    Security option

  5. On the Security page, scroll down until you find the section named Signing in to other sites. Click on Password Manager within that section.

  6. On the Password Manager page, look for the gear icon – that’s the Settings icon – and click on it.

  7. You’ll see a section labeled On-Device Encryption. Click on Set Up.

  8. A window will pop up explaining on-device encryption. Click Next to continue.

  9. Click Set up to confirm that you want to enable on-device encryption.

  10. To make sure it’s you, you’ll need to enter your Google account password and then click Next. If you lose your Google password, you may lose access to your saved passwords, so keep it secure! After this step, on-device encryption will be active, and you won’t be able to turn it off.
    Next button

  11. Google will take a brief moment to update the encryption settings. Once complete, your device will become the key for your passwords. Click Done to go back to the settings page.

Password availability on other devices

A common concern is whether enabling on-device encryption restricts access to passwords on other devices. Don’t worry; your passwords will still be available across all devices, but you’ll need your Google password or your device’s screen lock password to unlock them.

Recovering your passwords

It’s wise to set up password recovery options for your Google account, just in case you lose access to your device or forget your password. If you change your Google password, you’ll have to confirm the new password to unlock your saved passwords in Google Password Manager. Do this as quickly as you can after changing your password.

It’s also a good idea to sync your passwords across your devices so if one is lost you can still retrieve your passwords from another device.

Enabling on-device encryption gives you much better control over your password security, and makes sure only you can access them. It’s definitely worth the effort to set it up!