You just changed your phone or reinstalled your browser, and you can’t log into a site you used every day. The password has disappeared, or rather, you no longer know where it is stored. Your saved passwords still exist somewhere, on your device or in the cloud. You just need to know where to look depending on the system you are using.
The CSV file exported from Chrome, a frequently forgotten location
Before rummaging through the settings of each device, one point deserves your attention. Chrome allows you to export all your passwords to a CSV file from the Google Password Manager. This file can then be found in your Downloads folder, on a USB drive, or in a cloud service.
The problem: an exported CSV file is not encrypted by default. Anyone with access to your computer can open it with a simple spreadsheet and read your credentials in plain text. If you have used this feature before, check that this file has not remained on your hard drive or synced in a shared folder.
To find such a file, search for “chrome_passwords” or “passwords.csv” in your computer’s file explorer. If you find it, delete it after verifying that your passwords are safely backed up elsewhere. You can also check the list of passwords on CGI Network to identify all possible locations based on your setup.
Saved passwords on Android and iPhone: where to look
On an Android phone, your credentials are managed by the Google Password Manager. To access it, open your device’s Settings, then tap on Google, and finally on Password Manager. You will see a list of all the sites and apps for which Android has saved a password.
You can also access it directly from Chrome on mobile. Tap on the three dots at the top right, select Settings, then Password Manager. Synced passwords appear on all your devices connected to the same Google account.
Access on iPhone and iPad
On iOS, Apple stores your credentials in the iCloud Keychain. The path is Settings, then Passwords. The system will ask for biometric authentication (Face ID or Touch ID) before displaying anything.
You may have noticed that Safari offers to autofill your credentials on certain sites? This data comes from the same keychain. If you also use Chrome on iPhone, note that Chrome has its own storage space, separate from the Apple keychain.
Password manager on Windows: settings and browsers
On a Windows PC, your passwords can be found in several places depending on the browser and the settings enabled.
- In Chrome: click on the three dots, then Settings, then Autofill and passwords, then Google Password Manager. You can view, edit, or delete each saved credential there.
- In Edge: open Settings, then Profiles, then Passwords. Microsoft stores this data in its own manager, synced with your Microsoft account.
- In Firefox: go to Settings, then Privacy & Security, then Logins and Passwords. Firefox uses a system independent of other browsers.
Each browser manages its passwords separately. A credential saved in Chrome will not appear in Firefox, and vice versa. If you switch between multiple browsers, your passwords are scattered.
Passkeys on Windows 11, a new location to know
Windows 11 offers a dedicated menu in Settings, then Accounts, then Passkeys. This menu lists the locally stored FIDO2 access keys. These passkeys are not traditional passwords: they are cryptographic tokens that cannot be read in plain text. You cannot copy-paste them like a traditional password, but you can delete them from this location.
Securing the locations of your saved credentials
Knowing where your passwords are located is not enough. You also need to ensure that these locations are protected.
The Google Password Manager offers a tool called Password Checkup. It identifies compromised credentials during data breaches and flags those that are reused across multiple sites. To access it, go to the manager and select the checkup option.
- Enable synchronization with your Google or Apple account to avoid losing your passwords in case of device loss.
- Delete exported CSV files after use, as they represent the weak link in your security.
- Regularly check which browsers store your data: an old browser you no longer use may still contain sensitive credentials.
- If you use a third-party manager (Proton Pass, Bitwarden, or others), ensure that the master password is unique and strong.
Why check all your browsers
Many people have installed a browser for occasional use, saved passwords in it, and then forgotten about it. These credentials remain stored locally. An unused browser with active passwords is a dormant risk. Review all the browsers installed on your machine, even those you no longer open.
Finding your saved passwords requires knowing the locations specific to each system and each browser. The most useful reflex is to centralize your credentials in a single synchronized manager, then clean up the traces left elsewhere, especially the unencrypted CSV files that sometimes linger for months in a Downloads folder.