Is It Safe to Save Passwords in Your Browser?

The answers to this question tend to be absolutist in one direction or the other. Security writing says never; the browser asks you every time and clearly thinks it is fine.

The useful answer is comparative, because it depends entirely on what you would otherwise be doing.

Against reusing the same password everywhere — which is the real alternative for most people — browser saving is a clear improvement. Against a dedicated password manager, it loses on four specific points. Knowing which four lets you decide honestly instead of feeling vaguely guilty.

What browsers actually do well

Modern browser password stores are considerably better than their reputation suggests, and it is worth being fair about that.

Saved passwords are encrypted at rest, tied to your operating system account. Sync between your devices is encrypted. All the major browsers now generate strong random passwords when you sign up for something, warn you when a saved password has appeared in a known breach, and support passkeys.

Critically, they also do the thing that matters most: they make it costless to have a different password for every site. That single behaviour change accounts for most of the security benefit of any password tool, and the browser delivers it for free with no setup.

Anyone who has moved from "the same password with a number on the end" to browser-generated passwords has made a bigger improvement than anyone moving from a browser to 1Password.

The four places it loses

1. Anyone with your unlocked computer can read them

Open your browser's password settings, enter your operating system password or device PIN, and the saved passwords are displayed in plain text.

That is deliberate — you need a way to retrieve a password to type it somewhere else. But it means your saved passwords are protected by your device login, and device logins are things people share, leave unlocked, and choose badly.

A dedicated password manager locks separately from your computer and re-locks itself on a timer. Someone who sits down at your unlocked laptop gets your email; they do not automatically get your bank.

2. It only works in that browser

Passwords saved in Chrome are not in Safari. Passwords saved in Safari are not in Firefox. And none of them help in a desktop application, a mobile app that is not a browser, or an installer asking for a licence key.

In practice people end up with passwords scattered across two browsers and a phone, which recreates the confusion the tool was meant to eliminate.

3. It only stores website logins

Two-factor recovery codes. Your passport number. The wifi password for the office. Software licence keys. The bank account details you get asked for twice a year. The door code.

None of that is a website login, so none of it goes in the browser — and it therefore ends up in a notes app, an email to yourself, or a photo in your camera roll, all of which are meaningfully worse than either option on this page.

A password manager holds secure notes, cards and identities alongside logins. That is not a luxury feature; it is what stops the sensitive miscellany from ending up somewhere careless.

4. Sharing is impossible, so people message it

You cannot share a browser-saved password with a partner or a colleague. So it gets sent by text, or in a chat, or read aloud over the phone — and it then lives permanently in a message history neither of you controls.

This is the failure that turns a small convenience decision into a genuine exposure, and it is entirely predictable. Households and small businesses share logins. If the tool has no way to do it, the humans will improvise one.

The configuration that is actually worst

Not the browser. Both at once.

This is where most people who install a password manager end up: the manager holds some passwords, the browser still holds others, and both offer to save every new login.

The result is worse than either alone. You never know which store has the current version of a password. Changing one leaves the other stale, so the wrong one gets filled and you assume the account is broken. Neither store is a complete record, so you cannot audit either. And the browser keeps quietly re-saving things you thought you had centralised.

Pick one. Import everything into it. Turn the other off completely — not just "don't ask to save", but delete the stored entries once you have confirmed the import worked.

This one change removes more real-world risk than any argument about which store is more secure.

When the browser is genuinely good enough

There is a real case, and pretending otherwise is how security advice gets ignored.

If you live entirely in one ecosystem — every device is Apple and you only use Safari, or everything is Google and you only use Chrome — the built-in manager covers most of the job. Sync works, breach alerts work, passkeys work.

If the alternative is doing nothing, the browser wins by default. A tool you will actually use beats a better tool you will abandon in week two. This is not a consolation-prize argument; adoption is the whole game.

In that case, do these three things and you have closed most of the gap:

• Turn on two-factor authentication for the account your browser syncs to (your Google or Apple account). Without it, that one account is a master key to every password you have saved.
• Set a strong device password and a short auto-lock. Your saved passwords are now protected by your lock screen, so treat it accordingly.
• Act on the breach warnings rather than dismissing them. They are the most useful thing the browser does and the most ignored.

When to move to a real manager

Four signals, any one of which is sufficient:

• You use more than one browser, or you need passwords in apps as well as websites.
• You share logins with a partner, family member or colleague.
• You have secure notes, recovery codes or documents currently sitting somewhere careless.
• It is for a business, where you need shared vaults and a way to revoke access when someone leaves — no browser does this, at any price.

The move costs nothing to try: both Bitwarden and Proton Pass run free plans with unlimited devices and unlimited passwords, and both import directly from browsers, so the migration is genuinely one afternoon. They are compared in the best free password manager.

Do the import, verify a handful of entries, then go back and delete the browser's stored copies. That last step is the one everybody skips, and it is what turns a good decision into a completed one.

If you are still unconvinced that concentrating everything in one vault is wise, the objection is dealt with honestly in are password managers safe. And if you have started seeing prompts to use a passkey instead of a password, that shift is explained in passkeys vs passwords.