MAC KEYCHAIN ACCESS ICONS PASSWORD
Google took a lot of deserved heat when developer Elliott Kember called out this "insane password security strategy" in a blog post last August. That second stop is a good idea anyway on a laptop. To thwart that, you'll either need to stop it from saving passwords and clear those already saved (in its settings page, click "Show advanced settings…") or set your computer's screen to require a password to unlock after a few minutes of inactivity. By default, this browser lets anybody with access to your screen inspect saved logins without further authentication-as you can see by typing "chrome://settings/passwords" into its address bar and clicking the "Show" button next to each entry. Unfortunately, the standard Keychain-access dialog only has "Allow," "Always Allow" and "Deny" buttons-not "Get out of my face and don't ever ask again."Īfter I tweeted a little rant over that, Ars Technica's Jon Brodkin pointed out a fix: In Chrome's settings, click the "Advanced Sync Settings…" button and uncheck "Passwords." Chrome hasn't bothered me with a Keychain nag since.īut even having Chrome confine saved passwords to your own computer can carry a security risk. If you'd already saved Web passwords in Apple's Safari browser, Chrome will ask if it, too, can have access to the OS X Keychain's database of those logins. This situation can arise if you enable Chrome's optional sign-in feature, which syncs your browser use-not just bookmarks, but open pages, settings and passwords-across multiple devices.
MAC KEYCHAIN ACCESS ICONS MAC
But you should decline the offer unless you use Chrome as your primary browser on a Mac and you can secure your computer against curious passerby, change a hidden and experimental setting or do both. Google means well with this poorly-presented request-its way of asking if it can keep your passwords in sync with other copies of its browser. Should I let it? How do I stop it from asking?Ī. Every time I start up Chrome, it pesters me for access to my Mac's password Keychain.