Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

To check passwords saved in Chrome, open More > Passwords and autofill > Google Password Manager, then choose Checkup in the left navigation. It can flag saved passwords Google identifies as compromised, reused, or weak so you can take action. The check covers credentials saved in Google Password Manager; it does not certify that every account you use is secure.

Where is Password Checkup in Chrome?

On a computer, open Chrome and follow this path:

  1. Select More (the three-dot menu).
  2. Select Passwords and autofill > Google Password Manager.
  3. In the left navigation, select Checkup.

Google’s Chrome password-management instructions describe this desktop route. You can also use Google Password Manager at passwords.google.com; Google provides separate instructions for checking and changing passwords in a Google Account.

Checkup reviews passwords saved in Google Password Manager. If a password for an account is not saved there, it may not appear in these results.

What do the Checkup results mean?

Compromised passwords

Google describes a compromised username-and-password combination as one that has been published online. Change the password promptly on the affected service. If you used it elsewhere, change it on every affected account too.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
#1 Best Overall
OnlyKey FIDO2 / U2F Security Key and Hardware Password Manager | Universal Two Factor Authentication | Portable Professional Grade Encryption | PGP/SSH/Yubikey OTP | Windows/Linux/Mac OS/Android
  • ✅ PROTECT ONLINE ACCOUNTS – A password manager, two-factor security key, and secure communication token in one, OnlyKey can keep your accounts safe even if your computer or a website is compromised. OnlyKey is open source, verified, and trustworthy.
  • ✅ UNIVERSALLY SUPPORTED – Works with all websites including Twitter, Facebook, GitHub, and Google. Onlykey supports multiple methods of two-factor authentication including FIDO2 / U2F, Yubico OTP, TOTP, Challenge-response.
  • ✅ PORTABLE PROTECTION – Extremely durable, waterproof, and tamper resistant design allows you to take your OnlyKey with you everywhere.
  • ✅ PIN PROTECTED – The PIN used to unlock OnlyKey is entered directly on it. This means that if this device is stolen, data remains secure, after 10 failed attempts to unlock all data is securely erased.
  • ✅ EASY LOG IN –No need to remember multiple passwords because by plugging OnlyKey to your computer, it automatically inputs your username and password. It works with Windows, Mac OS, Linux, or Chromebook, just press a button to login securely!

Reused passwords

A reused password is shared across multiple accounts. If one service is breached, the same password may put the other accounts at risk. Replace it on each affected service with a different password.

Weak passwords

Google gives examples of weak passwords such as obvious phrases, simple keyboard patterns, and single words. Replace a weak password with a strong, unique one. Google’s account security guidance advises: “Make sure you create a strong and unique password for each account.”

Rank #2
Yubico - Security Key C NFC - Basic Compatibility - Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB-C or NFC, FIDO Certified
  • POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
  • WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
  • FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
  • TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
  • BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.

How should you respond to a finding?

  1. Open the affected account’s website or app directly, rather than following an unexpected message or link.
  2. Change the password in that service’s account or security settings. For compromised credentials, do this promptly.
  3. If the old password was reused, update every other account where you used it.
  4. Use a distinct password for each account, then revisit Checkup to review any remaining findings.

For some compatible websites, Chrome may offer an automatic password-change option. Google says this depends on prerequisites, including being signed in to a Google Account in Chrome, having the password saved, and having password saving enabled. It is an option for supported sites, not a universal one-click fix. See Google’s instructions for managing passwords in Chrome.

How do Checkup and Chrome’s breach alerts differ?

Checkup is a manual review: you open Google Password Manager and select Checkup. Chrome can also warn you about compromised credentials when you sign in. Google places that alert control under Settings > Privacy and security > Security > Standard protection and says the feature is available only when Safe Browsing is on. If the labels differ in your version, look in Chrome’s Security settings. Google’s password-management help covers the warning controls.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #3
Sale
Password Safe
  • Requires 3 "AAA" batteries (included)
  • Unit auto-locks for 30 minutes after 5 consecutive incorrect PINs

How does Google describe the privacy of password checking?

Google says Chrome encrypts credentials on your device before sending an obscured copy for comparison with an encrypted list of known breaches. Google states: “Google never learns your usernames or passwords during this process.” Read its explanation in How Chrome protects your passwords.

This describes Google’s breach-checking design; it is not a guarantee that password storage, devices, or account access are risk-free. Google also says protections for saved password data can depend on the operating system in its explanation of how Chrome protects autofill and password data.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

What a clean Checkup result does—and does not—tell you

A clean result means Checkup did not identify a problem among the saved credentials it reviewed. It does not establish that every account you own is represented in Google Password Manager or that your accounts, devices, and sign-in methods are otherwise secure. Keep Chrome and your devices protected, and use unique passwords for accounts.

Best Value
Yubico - YubiKey Bio C (FIDO Edition) - Basic Compatibility - Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB-C, Biometric, FIDO Certified - Protect Your Online Accounts
  • FIDO-ONLY FUNCTIONALITY: Supports FIDO2 (passkeys) and FIDO U2F protocols for passwordless and second-factor authentication. Does not support OTP, TOTP, Smart Card (PIV), or other advanced features - upgrade to YubiKey 5 Series for extended functionality
  • SECURE AND CONVENIENT: Passwordless MFA login with the YubiKey Bio authenticator and biometric information using a fingerprint, with a PIN as a fallback. Simply plug in via USB and use your fingerprint to authenticate
  • DEVICE & OS COMPATIBILITY: Compatible with Windows, macOS, ChromeOS, and Linux. Works seamlessly with supported services like Google and Microsoft accounts, and major password managers. See the full compatibility list at "Works With YubiKey"
  • DURABLE & RELIABLE: Resistant to tampering, water, and crushing. No batteries or network connectivity required, offering dependable authentication without any downtime. Securely manufactured in USA & Sweden
  • Yubico Authenticator App - Fingerprint enrollment, passkey management and PIN configuration available via the app app - Upgrade to YubiKey 5 Series to generate one-time-passwords (OTP) via Yubico Authenticator and for advanced compatibility (OATH, PIV)

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.