Google wants to make changing your compromised passwords easier

Chrome users in the U.S. can ask their browser to automatically update compromised passwords.
 By 
Jack Morse
 on 
Google wants to make changing your compromised passwords easier
Tap. Tap. Tap. Credit: ambar del moral / mashable

If you won't clean up your compromised passwords, then Google, like an exasperated parent, will have to do it for you.

During the tech behemoth's annual developer conference on Tuesday, Google I/O, the company announced a new (and for now limited) effort to help Chrome users change passwords that may have been exposed in a breach. This new feature complements Chrome's built-in password manager, and follows on the 2019 announcement that Chrome will warn users of potentially exposed passwords.

Essentially, using Duplex, Google is attempting to automate the sometimes time-consuming process of logging into a rarely used online account, navigating to the password-change menu, and going through the necessary steps.

"Chrome comes with a strong password manager built-in," Google said in a blog post. "It's been checking the safety of your passwords for a while now. And starting today, whenever Chrome detects a breach, it can also fix any compromised passwords quickly, and safely."

Mashable Image
Changing it up. Credit: google

As people often reuse passwords (which they shouldn't do!), a compromised password on a random ticketing website, for example, might allow a hacker to gain access to a victim's bank account via an attack called credential stuffing.

Essentially, a hacker gets a list of password and email combinations from an ostensibly low-value target, like Dunkin' Donuts Perks accounts, and then tries every single one of those combinations on banking websites. Many of those Dunkin' customers likely use online banking — and at least of few of them might use the same passwords for both their Dunkin' and bank accounts.

Notably, Google's new feature only works with "supported sites" in the U.S. for now, and it's not clear which (or how many) sites are supported.

"The feature is rolling out on a small number of apps and websites, including Twitter, but will expand to additional sites/apps/countries in the future," a company spokesperson explained when asked for a list of supported sites.

SEE ALSO: Why you should lie in your password-recovery questions

Google says it intends to expand this service beyond the U.S. "in the coming months."

For Chrome users with hundreds of compromised passwords accumulating over the years, this automated process can't come soon enough.

Related Video: How to concoct (and remember!) an insanely secure password

Mashable Image
Jack Morse

Professionally paranoid. Covering privacy, security, and all things cryptocurrency and blockchain from San Francisco.

Mashable Potato

Recommended For You
3 new Google Chrome features to make your work day easier
Google Chrome update

Google Veo 3.1 will generate social-ready vertical videos in Gemini
google gemini and veo 3.1 logos


CES 2026: These color-changing sunglasses are like something out of a sci-fi movie
man wearing color-changing sunglasses at ces 2026

Make working with PDFs easier for life with this $30 app
PDF Converter & Editor: Lifetime License

Trending on Mashable
NYT Connections hints today: Clues, answers for April 3, 2026
Connections game on a smartphone

Wordle today: Answer, hints for April 3, 2026
Wordle game on a smartphone


NYT Connections hints today: Clues, answers for April 2, 2026
Connections game on a smartphone

What's new to streaming this week? (April 3, 2026)
A composite of images from film and TV streaming this week.
The biggest stories of the day delivered to your inbox.
These newsletters may contain advertising, deals, or affiliate links. By clicking Subscribe, you confirm you are 16+ and agree to our Terms of Use and Privacy Policy.
Thanks for signing up. See you at your inbox!