Is Google Password Manager Safe to Use in 2024?

If you find yourself mostly in the Google ecosystem for your day-to-day online activities, you may have wondered if the free Google Password Manager is safe enough as your sole password manager in 2025.

While Google Password Manager aims to simplify password management by offering some vital features, including — password storage, password generation, auto-filling, and security alert, the main concern remains — how safe is the tool in today’s cyber-threat-infested landscape?

In this review, I looked into how the solution works, exploring its features, benefits, and drawbacks. I’ll also help you decide if it’s the right choice for your security needs and suggest alternatives if it doesn’t fit the bill.

What is the Google Password Manager?

This is a password manager offered by Google to help users manage, store, and auto-fill their passwords across websites and Google apps. As you’d expect, it’s integrated into Google’s ecosystem, particularly in their Chrome browser, Android OS services — allowing you to easily save and sync your passwords to your Google Account. You can also use the tool on your iPhone, iPad, and computer by signing in to your Google account in Chrome. For other browsers like Safari, Edge, and Firefox, you must sign in with a passkey.

Is Google Password Manager safe?

While Google Password Manager can give you some basic protection and password management features, it still cannot be compared to dedicated password managers in many other areas beyond password storage and password generation.

Today’s online landscape is fraught with many cyber threats, and only a dedicated password manager can offer advanced features like zero-knowledge encryption, cross-platform compatibility, travel mode, and secure password sharing and inheritance options for adequate security. Larger enterprises can also find dedicated password managers more useful due to their customization, independent company focus, and better customer support systems.

So, the choice of your password manager depends on your online security needs. But one thing I would advise is that if you’re a large enterprise, it would be better to go for a dedicated password manager.

On the other hand, if you only need a password manager for basic, individual protection, then the Google Password Manager is a good option since it’s entirely free.

How does Google Password Manager work?

Google Password Manager is not like many other dedicated password managers that make it easy to access your passwords on any device or browser. It’s entirely Google-specific, meaning it can only work well with the Google Chrome browser on Android devices. However, you can still access the tool if you are on the iOS train, but you will have to log in to your Google account to make it work.

From my first-hand experience using an Android device, Google Password Manager can perform the functions I explained below.

Password generation

Google Password Manager can generate secure, random passwords for you when signing up for a new website or app. Using the feature is simple, as all you need to do is click on the password text box and then on the “Suggest Strong Password” drop-down menu. You can keep clicking Suggest Strong Password for more options. The dialog box will remind you that Google Password Manager will save your selected password.

Password autofill

This feature helps you autofill your saved passwords or usernames when you visit a website or open an app synchronized with your Google account. You may be prompted to confirm the auto-filled credentials or select from multiple saved accounts.

Password checkups and alerts

Google keeps your account safe from attacks with Password Checkup. The tool checks your saved passwords against databases of known security breaches. It alerts you if your passwords are weak, reused, or compromised and provides recommendations for creating strong passwords.

Password import and export

Google can allow you to export or import your passwords to the Google Password Manager in Chrome. During testing, I noticed I can only import passwords in the .csv file format to Google Password Manager. And the imported passwords are capped at the 3,000 maximum limit. To import more, I had to split the passwords into multiple .csv files and import the files separately.

On-device encryption

With this encryption method, Google uses your device to encrypt your passwords before they’re stored in Google Password Manager. This ensures that only you have access to your passwords. However, you need to be careful when you turn on this feature because if you lose the key, you also risk losing access to your passwords.

What are the downsides of Google Password Manager?

Although the Google Password Manager allows for safe password generation, password checkup, and other features, it may not be the optimal solution or be considered one of the best free password managers. Here are a few drawbacks to the tool that I noticed during testing:

Unclear security encryption

Google Password Manager’s encryption methods are not thoroughly detailed for users. Again, the platform’s code is not open source, so there’s no way to verify whether your data is secure, and this may raise concerns about the safety of your sensitive information.

Works well with only Chrome

Google Password Manager is built into Chrome (on all platforms) and every Android app. So, if you fondly use a different web browser, you might find it difficult to use the tool. To use your Google-saved passwords on browsers like Safari, Edge, and Firefox, you must first sign in with your passkey.

Weak two-factor authentication

When you log into your Google account from a new device, Google uses two-factor authentication to confirm your identity. However, I noticed that 2FA isn’t required before accessing your saved passwords, and this is a major security concern since your passwords can be accessed once an attacker gets your Google account login details.

Lacks some advanced features

I also found that Google Password Manager does not offer some advanced features found in other dedicated password management services like NordPass and 1Password. For instance, it lacks a built-in 2FA feature, the option to create hide-my-email aliases, encrypted vault functionality, the capability to securely share passwords with others outside the Google ecosystem, a standalone app, etc.

What Reddit users say about Google Password Manager

I checked some Reddit communities to see the opinions of other real-world users on Google Password Manager. Here is a summary of what they are saying:

Some Reddit users I found in a Yubikey community believed that using Google Password Manager is way better than not using any password manager at all. Even though the tool can’t give you the robust security available in some dedicated password managers like 1Password and Bitwarden.

Other users were also worried about the safety of their passwords or credentials, like this Reddit user in a cybersecurity community who asked — “I’ve been considering using a password manager, but from my admittedly poor understanding, it seems like that makes a single point of failure. How are these passwords stored? If someone got access to my Google account, would they suddenly have access to every service I use with my credentials stored in the password manager?”

In addressing the question in the cybersecurity community, some users argued that attackers can lay hands on your saved passwords once they gain access to your Google account. Others suggest it’s better to choose a dedicated password manager with less attack surface or activate multi-factor authentication if you must continue using Google Password Manager.

SEE: Intrusion Detection Policy (TechRepublic Premium)

Google Password Manager alternatives

If you are not satisfied with the Google Password Manager and want to try a dedicated password manager instead, here are the top Google Password Manager alternatives I tested during this review.

NordPass: Best overall alternative

NordPass offers good password security for personal and professional use at a reasonable price. It protects your accounts by using the xChaCha20 encryption algorithm. Aside from having important features like breach scanner, encrypted vault, and password health, it also has a new feature called email masking, which you can use to protect your email address online. Google Password Manager, on the other hand, isn’t open about its security encryption method; while having breach scanner equivalent in password checkup, the process itself isn’t zero-knowledge.

1Password: Best for cross-platform compatibility

1Password is a highly secure and feature-rich password manager with an easy-to-use Chrome extension. 1Password allows you to securely share logins, credit cards, and more with people. One thing I like about 1Password over Google Password Manager is that you can create expiring links to share single items with anyone — even if the person doesn’t use 1Password. Again, unlike Google Password Manager, which only works well with the Chrome browser, 1Password on the other hand has browser extensions for Google Chrome, Microsoft Edge, Mozilla Firefox, and Apple’s Safari.

Keeper:  Best for enterprise usage

Keeper is a good password manager that combines stringent security features with a user-friendly experience. I picked Keeper as a good alternative because it provides real-time data on security risks with comprehensive visibility, control, event logging, and reporting suitable for large enterprises. It has also passed an independent security audit, which ensures user data is secure. In contrast, Google Password Manager doesn’t present you with any form of visibility into password management, and it has not been audited due to its closed-source nature.

This article was originally published in September 2024. It was updated by Luis Millares in May 2025.