Return to Answer

added 145 characters in body

edited Jul 28, 2016 at 10:33

user15194

Encryption in the user space usually works by storing the key in an encrypted keychain (keychain in OSX, Gnome Keyring, KDE wallet, whatever name Microsoft uses in Windows...). This keychain is either locked by a custom password or more traditionally by your user password, so whenever you log in, your system automatically unlock it.

This is pretty much what @deviantfan said in his third comment above. Another user can't view your passwords unless he knows your user credentials to be able to log in as you, or the master password to unlock the keychain if it's accepting a custom password for it (Gnome keyring and KDE wallet do).

So, why Firefox can read Chrome's passwords? Because the local password manager is unlocked upon you log in. I'm not sure you can do it the other way around (haven't tried). If you lock Firefox's password with a master password, can you import them to Chrome? It shouldn't unless you type the password during the importing process.

edit

You have more info in the following link, explained by Chrome's security teach lead. https://news.ycombinator.com/item?id=6165708

Encryption in the user space usually works by storing the key in an encrypted keychain (keychain in OSX, Gnome Keyring, KDE wallet, whatever name Microsoft uses in Windows...). This keychain is either locked by a custom password or more traditionally by your user password, so whenever you log in, your system automatically unlock it.

This is pretty much what @deviantfan said in his third comment above. Another user can't view your passwords unless he knows your user credentials to be able to log in as you, or the master password to unlock the keychain if it's accepting a custom password for it (Gnome keyring and KDE wallet do).

So, why Firefox can read Chrome's passwords? Because the local password manager is unlocked upon you log in. I'm not sure you can do it the other way around (haven't tried). If you lock Firefox's password with a master password, can you import them to Chrome? It shouldn't unless you type the password during the importing process.

Encryption in the user space usually works by storing the key in an encrypted keychain (keychain in OSX, Gnome Keyring, KDE wallet, whatever name Microsoft uses in Windows...). This keychain is either locked by a custom password or more traditionally by your user password, so whenever you log in, your system automatically unlock it.

This is pretty much what @deviantfan said in his third comment above. Another user can't view your passwords unless he knows your user credentials to be able to log in as you, or the master password to unlock the keychain if it's accepting a custom password for it (Gnome keyring and KDE wallet do).

So, why Firefox can read Chrome's passwords? Because the local password manager is unlocked upon you log in. I'm not sure you can do it the other way around (haven't tried). If you lock Firefox's password with a master password, can you import them to Chrome? It shouldn't unless you type the password during the importing process.

edit

You have more info in the following link, explained by Chrome's security teach lead. https://news.ycombinator.com/item?id=6165708

answered Jul 28, 2016 at 7:33

user15194

Encryption in the user space usually works by storing the key in an encrypted keychain (keychain in OSX, Gnome Keyring, KDE wallet, whatever name Microsoft uses in Windows...). This keychain is either locked by a custom password or more traditionally by your user password, so whenever you log in, your system automatically unlock it.

This is pretty much what @deviantfan said in his third comment above. Another user can't view your passwords unless he knows your user credentials to be able to log in as you, or the master password to unlock the keychain if it's accepting a custom password for it (Gnome keyring and KDE wallet do).

So, why Firefox can read Chrome's passwords? Because the local password manager is unlocked upon you log in. I'm not sure you can do it the other way around (haven't tried). If you lock Firefox's password with a master password, can you import them to Chrome? It shouldn't unless you type the password during the importing process.