How to Use Chrome Password Checkup

Password Checkup scans every password saved in Google Password Manager at once and tells you which ones are exposed in a data breach, reused on more than one account, or weak and easy to guess. To run it in Chrome on a computer:

1. Open Chrome. At the top right, select More (the three dots), then Passwords and autofill, then Google Password Manager. You can also paste chrome://password-manager into the address bar.
2. On the left, select Checkup.
3. Review the results and fix the compromised passwords first.

These are the steps in Google’s help pages Manage passwords in Chrome and Change compromised passwords in your Google Account.

On Android

1. Open the Chrome app. At the top right, tap More and then Settings.
2. Tap Google Password Manager, then Checkup.

On iPhone and iPad

1. Open the Chrome app and tap More, then Password Manager.
2. Under “Password Checkup”, tap Check Now. If you do not see it, tap Password Checkup and then Check Again.

Google says that after the first check on iPhone and iPad, Password Checkup runs automatically whenever you open Password Manager.

From another browser

Password Checkup also works for passwords saved to your Google Account when you are not using Chrome. Go to passwords.google.com, select Go to Password Checkup and then Check passwords. You may need to sign in.

What the results mean

• Compromised. The username and password combination has been published online, so it is unsafe. Google recommends changing these as soon as you can.
• Reused. The same password is used for more than one account. If one of those sites leaks it, the others are at risk too. Google strongly recommends a unique password for every account.
• Weak. The password uses obvious phrases, simple keyboard patterns or a single word, so it can be guessed easily.

How to fix each problem

1. Go to the site, sign in, and change the password in its account settings.
2. Use a new password you do not use anywhere else. On a computer, when you are signed in to Chrome, select the password box on a site and choose Use strong password; if that option does not show, right-click the box and choose Generate password. Chrome saves the password it suggests.
3. If Chrome did not update the saved copy, open Google Password Manager, select the password, select Edit, enter the new password and select Save.
4. Run Checkup again to confirm the warning has gone.

Google’s tip: to update passwords in your Google Account automatically, sign in to Chrome and let it use passwords from your Google Account when asked.

Dismiss a warning

If a compromised password belongs to an account you have closed, you can hide the warning. Next to the compromised password, select More and then Dismiss warning. It moves to “Dismissed warnings”, where More and Restore warning bring it back.

Got a breach warning while signing in?

Chrome can also warn you on the spot when you use a password that has been in a data breach. That warning needs action right away, so our breach alert guide covers what to do in the order that matters.