Easily Read the Autofilled Password

Chromium-based browser has an insecure feature when allow autofilling without master password before filling. People should use a separate password manager instead of browser's default password manager.

Here's how to read password of any website if browser is left unattended:

  • Open a new tab to the site to read password
  • Log out
  • Go to log-in page
  • Browser auto-fills the password
  • Read the password:
    • Press F12 to open DevTools,
    • Click the first button on DevTools at its top-left corner which has icon of a square and an arrow pointing in
    • Click the password input on UI
    • On DevTools panel, click 'Console' tab
    • Type $0.value, and hola password appears

You'll only receive email when they publish something new.

More from 19411
All posts