Easily Read the Autofilled Password
March 12, 2023•117 words
Chromium-based browser has an insecure feature when allow autofilling without master password before filling. People should use a separate password manager instead of browser's default password manager.
Here's how to read password of any website if browser is left unattended:
- Open a new tab to the site to read password
- Log out
- Go to log-in page
- Browser auto-fills the password
- Read the password:
- Press F12 to open DevTools,
- Click the first button on DevTools at its top-left corner which has icon of a square and an arrow pointing in
- Click the password input on UI
- On DevTools panel, click 'Console' tab
- Type
$0.value, and hola password appears