Manually entering passwords is tedious, which is why many people use autofill services that come with password managersto save time. For better security, it's a good idea to require biometric authentication before autofilling passwords. This prevents thieves who might gain access to your phone from logging into accounts that aren't already open. Unfortunately, Google Chrome's password autofill on Android currently doesn't have any form of authentication, but that's set to change soon.
See also: Apple fixes Safari vulnerability that is being abused in Chrome
If you use Google Password Manager, you may have noticed the “Authenticate with biometrics before filling in passwords” option in the Settings > Google > Google Autofill > Preferences. As the name suggests, this setting prevents autofilling passwords until you verify your identity via facial recognition or fingerprint.
Unfortunately, this protection only applies to apps and does not work in browsers like Google Chrome, even though Chrome uses the same password autofill service by default.
See also: Files by Google update fixes search issues
Thankfully, Google is finally addressing this long-standing omission. Telegram user Micha reported to us that the “Authenticate with biometrics before filling in passwords” option has disappeared from Google AutoFill settings. In its place, a new option titled “Verify identity for autofill passwords” now appears at the bottom of the main Google Password Manager settings page.
Although the option has been renamed and moved, it offers the same level of protection. However, its new description includes one encouraging detail:
“For extra protection, always use your fingerprint, face, or other screen lock when signing in with AutoFill (coming soon to Chrome).”
This description confirms that Chrome will soon require biometric authentication — such as a fingerprint, facial recognition, or screen lock — to autofill passwords. While it remains unclear whether this new setting will also apply to Chrome or whether it will get a separate toggle, it is a significant improvement in security.
See also: Google fixes critical zero-day vulnerability in Chrome
Back in October, we reported that Google Chrome would block autofilling passwords if your phone was stolen. This protection is based on Android’s “Authentication Check” feature, which requires biometric verification when the device is in an untrusted location. While Google has yet to fully integrate this feature into Chrome, the new toggle that has appeared appears to enable broader protection, regardless of the location .
Source: androidauthority
