Earlier this year, Google developed “Password Checkup” as an expansion for Chrome desktop, a tool that checks whether any of your passwords were disclosed in an internet data breach. In the near future, Password Checkup’s leak detection portion will become Google Chrome’s standard function rather than an optional expansion.
Services like Have I Been Pwned have been providing insight into whether or not your password has ever been compromised in a data breach for years. Google has taken things a step further by providing the Password Checkup extension which automatically checks the security of your password when you log in to different web services.
However, the development of it as a browser extension has two main faults. The first is that it is still an opt-in feature, which means you need to actively search for password security that many don’t want to do or even realize they need to do. The second and more obvious omission is that Chrome for Android does not support extensions, unlike other mobile browsers.
Fortunately, according to the Chromium Bug Tracker, by incorporating the leak detection of Password Checkup straight into Chrome, Google is looking to alter stuff. While the design documents are private at the moment, there are enough code changes available to compile how it should work together.
Like the extension, Chrome will send your username to the Password Checkup service with an encrypted version of matching leaked usernames and passwords. Your device uses this to verify if that password has been compromised or not, without sharing that data with Google.
For those who do not want Google to check the security of your passwords for whatever reason, these Password Checkup features can also be disabled. This is achieved primarily for enterprise customers ‘ sake, but the setting is likely to be accessible to the remainder of us as well.
Building Chrome Password Checkup also provides you access to your Google Account synced passwords. Since these are passwords with which you already have confidence in Google, Password Checkup can use Google’s servers to perform a much quicker check to see if any of them are compromised.
Google presently has a bug to build Password Checkup in Chrome tagged for Chrome 78, due to be released early October. That being the case, the integration should arrive in the near future in Chrome Canary and Dev builds.