Chrome password sync - Samsung Galaxy Nexus

Does anyone here find it very odd that Chrome on iOS offers password sync but Chrome on Android doesn't? I'm surprised we're still waiting on this feature, especially with Chrome being the default browser on the Nexus 7.

What password sync?
You mean sync data encryption?
Will the next nexus have a longer screen?

Mach3.2 said:
What password sync?
You mean sync data encryption?
Will the next nexus have a longer screen?
Click to expand...
Click to collapse
I'm talking about syncing your saved passwords.

xdp said:
I'm talking about syncing your saved passwords.
Click to expand...
Click to collapse
Oh, that's new to me

xdp said:
I'm talking about syncing your saved passwords.
Click to expand...
Click to collapse
As they apparently mentioned at I/O 2012, it's coming (soon?), waiting for that myself
http://download.cnet.com/8301-2007_4-57463395-12/chrome-goes-mobile-at-i-o-2012/

as insecurely as the passwords are stored in chrome, no thanks. i'll stick to lastpass for my password syncing.

Zepius said:
as insecurely as the passwords are stored in chrome, no thanks. i'll stick to lastpass for my password syncing.
Click to expand...
Click to collapse
Just to clear things up.. passwords stored by Chrome are not insecurely stored. They are indeed encrypted and can only be decrypted by the same user and machine that they were encrypted on.

akira02rex said:
Just to clear things up.. passwords stored by Chrome are not insecurely stored. They are indeed encrypted and can only be decrypted by the same user and machine that they were encrypted on.
Click to expand...
Click to collapse
its not very secure still unless you change the options:
Protect your synced data
When you sign in to Chrome and enable sync, Chrome keeps your information secure by using a passphrase to encrypt your synced data. By default, Chrome uses your Google Account password as the passphrase, but you can choose to use a custom encryption passphrase instead. This custom passphrase is stored on your computer and isn’t sent to Google.
Click to expand...
Click to collapse
this also explains how lastpass can import all saved passwords with ease.
source: http://support.google.com/chrome/bin/answer.py?hl=en&answer=1181035

Zepius said:
its not very secure still unless you change the options:
this also explains how lastpass can import all saved passwords with ease.
source: http://support.google.com/chrome/bin/answer.py?hl=en&answer=1181035
Click to expand...
Click to collapse
Yes, so the more secure option is there for those that want to use it. Does that not take care of your concerns? I use LastPass as well, and while it's awesome, it's a pain to have to open it first and copy my passwords to paste into Chrome, not to mention the poor security of then having your password on the clipboard. Or you could use the LastPass browser, which clearly will never be as good as Chrome. How are either of those better options?
So my compromise is to use LastPass as my default password store but to also permit Chrome to save them. Since I have many more passwords saved on my desktop than on my phone, it would be nice to have the password sync feature that iOS Chrome already has.

xdp said:
Yes, so the more secure option is there for those that want to use it. Does that not take care of your concerns? I use LastPass as well, and while it's awesome, it's a pain to have to open it first and copy my passwords to paste into Chrome, not to mention the poor security of then having your password on the clipboard. Or you could use the LastPass browser, which clearly will never be as good as Chrome. How are either of those better options?
So my compromise is to use LastPass as my default password store but to also permit Chrome to save them. Since I have many more passwords saved on my desktop than on my phone, it would be nice to have the password sync feature that iOS Chrome already has.
Click to expand...
Click to collapse
i'll continue to switch to the lastpass keyboard when i need a password, then i dont have to copy anything to the clipboard.

Zepius said:
i'll continue to switch to the lastpass keyboard when i need a password, then i dont have to copy anything to the clipboard.
Click to expand...
Click to collapse
I've tried that but I can't get it to really work. For example I can go to the site on my desktop and LastPass will detect the URL and auto fill just fine. But when I switch to the LastPass keyboard for that same URL on my phone, what do I do...press the LastPass button next to the spacebar? When I do that it just says no matches.

xdp said:
I've tried that but I can't get it to really work. For example I can go to the site on my desktop and LastPass will detect the URL and auto fill just fine. But when I switch to the LastPass keyboard for that same URL on my phone, what do I do...press the LastPass button next to the spacebar? When I do that it just says no matches.
Click to expand...
Click to collapse
right above where it says "no match found" there's text that says switch to groups. this allows you browse your sites and pick the one you need.

Given how broken Chrome's syncing of items in the favorites bar from one desktop machine to another works (it only ever adds new entries, and to do even that you have to disable syncing then re-enable it) I wouldn't count on syncing of Chrome passwords to a phone to work very well.

Zepius said:
right above where it says "no match found" there's text that says switch to groups. this allows you browse your sites and pick the one you need.
Click to expand...
Click to collapse
Thanks, I tried this but not only did it not work, it froze the browser tab for a moment after I chose the site login I wanted. Plus you have to keep logging back into the app.
The LastPass app is indispensable, but the only way to get real convenience while browsing is by having an actual browser plug-in (probably not going to happen anytime soon) or just have Chrome save passwords (and sync what you've saved from one device to another, which it's supposed to be doing).
wenglish said:
Given how broken Chrome's syncing of items in the favorites bar from one desktop machine to another works (it only ever adds new entries, and to do even that you have to disable syncing then re-enable it) I wouldn't count on syncing of Chrome passwords to a phone to work very well.
Click to expand...
Click to collapse
Yeah, I don't change my bookmarks much so I haven't noticed this, but it doesn't surprise me, Chrome's sync has always had issues. The password issue wouldn't surprise me as much though if it wasn't for iOS already having the feature, and for it saying you can sync your passwords in the app's store description. I get the feeling two very different teams work on these Chrome builds and don't communicate with each other at all.

Zepius said:
its not very secure still unless you change the options:
this also explains how lastpass can import all saved passwords with ease.
source: http://support.google.com/chrome/bin/answer.py?hl=en&answer=1181035
Click to expand...
Click to collapse
I have to argue this. Why is it not secure? I've told you its encrypted using a standard windows api. No one is going to hack your account because its not worth even trying. Hackers go for big names for fame not Joe Schmoe with $200 in his bank account.
Sent from my Galaxy Nexus using xda app-developers app

akira02rex said:
I have to argue this. Why is it not secure? I've told you its encrypted using a standard windows api. No one is going to hack your account because its not worth even trying. Hackers go for big names for fame not Joe Schmoe with $200 in his bank account.
Sent from my Galaxy Nexus using xda app-developers app
Click to expand...
Click to collapse
It seems like if you encrypt with your own passphrase then Google itself shouldn't be able to read your data (the passphrase doesn't leave your computer). Now, once it's on your phone, Chrome on Android does NOT provide a UI to display saved passwords like Chrome on desktop does, but whether it's accessible to be read by any other applications I don't know. I would certainly hope it's completely locked down and unreadable by anything.

Related

[slightly offtopic] Google Mail access?

Hi all.
My question is: which protocol is being used by the GMail application?
Is it POP3S, IMAP4S or HTTPS?
TIA.
Wow, seriously dude enter "gmail protocol" in google and the 1st result shows you.
Standard is pop3. You can also use IMAP, which I'd recommend, since that way all the changes you make on your device in your inbox will also show up when going to gmail.com see it as synching,
http://mail.google.com/support/bin/answer.py?hl=en&answer=75725
You've opened two threads(about a ROM that already has a dedicated thread) which don't belong on the DEV section.
prodygee said:
Wow, seriously dude enter "gmail protocol" in google and the 1st result shows you.
Standard is pop3. You can also use IMAP, which I'd recommend, since that way all the changes you make on your device in your inbox will also show up when going to gmail.com see it as synching,
http://mail.google.com/support/bin/answer.py?hl=en&answer=75725
Click to expand...
Click to collapse
I dont think you are understanding what he is asking, he wants to know what protocol the gmail application is using, not what the gmail servers are capable of, I originally assumed it used HTTPS as it looks a little web based but it is using imap, not sure if on a custom port though.
and this isnt a dev section question
prodygee said:
Wow, seriously dude enter "gmail protocol" in google and the 1st result shows you.
Standard is pop3. You can also use IMAP, which I'd recommend, since that way all the changes you make on your device in your inbox will also show up when going to gmail.com see it as synching,
http://mail.google.com/support/bin/answer.py?hl=en&answer=75725
Click to expand...
Click to collapse
LOL
The Gmail application bundled with android has no choice about the protocol!
So it's using one, but none knows which one!
It is push email based on active sync
l0st.prophet said:
It is push email based on active sync
Click to expand...
Click to collapse
Looks like I've found it!
http://superuser.com/questions/37430/what-port-protocol-is-used-by-the-gmail-application-on-android
It'd be _just_ IMAP4 over SSL.
Whooops my bad..
Uqbar said:
Looks like I've found it!
http://superuser.com/questions/37430/what-port-protocol-is-used-by-the-gmail-application-on-android
It'd be _just_ IMAP4 over SSL.
Click to expand...
Click to collapse
That is just saying it is possible, although it is pretty certain it uses IMAP idle mode.
If this was really going to you dude I would wireshark the traffic when syncing but im not sure why you even want to know.
and i don't see it using active sync tbh :-D
anarchyuk said:
That is just saying it is possible, although it is pretty certain it uses IMAP idle mode.
If this was really going to you dude I would wireshark the traffic when syncing but im not sure why you even want to know.
and i don't see it using active sync tbh :-D
Click to expand...
Click to collapse
Agree on all points.
The Gmail *app* definitely does not use active sync, although the actual Gmail *service* does support push email via active sync now so that Exchange based clients can use it.
Regards,
Dave
If I am not mistaken active sync is just the way that a windows mobile device links to m.google.com and has exchange server like sync doesnt it? so active sync is the way to add an exchange server that actually deals with the mail?
foxmeister said:
Agree on all points.
The Gmail *app* definitely does not use active sync, although the actual Gmail *service* does support push email via active sync now so that Exchange based clients can use it.
Regards,
Dave
Click to expand...
Click to collapse
Sorry, your wrong. The Google push service is based off Active Sync, just like the iPhone Mobile me one is, just like the Palm webOS one is.
l0st.prophet said:
Sorry, your wrong. The Google push service is based off Active Sync, just like the iPhone Mobile me one is, just like the Palm webOS one is.
Click to expand...
Click to collapse
Google have a push service based on ActiveSync, but this is not what pushes email to the Gmail application!
Regards,
Dave
Well I think it's web based (http or https) because I don't have IMAP and POP in my contract (damn orange ), but I never had any fee since I use the gmail app. This is why, by the way, orange france (dunno about other countries) removes google apps from his rom, like gmail, google chat and more... because they avoid them from making money.

[Q] Gmail on Android phone

On my Incredible, I started a gmail account and now I receive gmail on my phone.
Now I want to use gmail on my desktop PC but I don't remember how I started it on my phone i.e. I can't remember my username, password or the email address I used to start gmail.
How how can I recall these facts to add my gmail account to my desktop?
Thanks
kubla1 said:
On my Incredible, I started a gmail account and now I receive gmail on my phone.
Now I want to use gmail on my desktop PC but I don't remember how I started it on my phone i.e. I can't remember my username, password or the email address I used to start gmail.
How how can I recall these facts to add my gmail account to my desktop?
Thanks
Click to expand...
Click to collapse
Just go to settings>accounts & sync, you'll be able to see your username under gmail, then you can just go to the gmail site and recover your password.
mb02 said:
Just go to settings>accounts & sync, you'll be able to see your username under gmail, then you can just go to the gmail site and recover your password.
Click to expand...
Click to collapse
Thank you for the reply. I did what you said and the user name was my gmail address, and they asked for things I couldn't supply, like, who I sent gmail to, when did I open the account, etc.
Apparently I don't really have an account - just an email address. Does that make sense?
kubla1 said:
Thank you for the reply. I did what you said and the user name was my gmail address, and they asked for things I couldn't supply, like, who I sent gmail to, when did I open the account, etc.
Apparently I don't really have an account - just an email address. Does that make sense?
Click to expand...
Click to collapse
If your phone is receiving email you have a GMail account. If you don't recall what information you put in when you originally started the account there's probably not much more that can be done.
Did you find this phone or something?
StirCwazy said:
Did you find this phone or something?
Click to expand...
Click to collapse
That's what I was thinking
Yup. Very odd
Sent from my Incredible using XDA App
khanam said:
Yup. Very odd
Sent from my Incredible using XDA App
Click to expand...
Click to collapse
Just a little =)
I bet ya he doesn't respond back now. "OMG they found me out, how is that possible, I was sooooo careful!!!"
StirCwazy said:
Just a little =)
I bet ya he doesn't respond back now. "OMG they found me out, how is that possible, I was sooooo careful!!!"
Click to expand...
Click to collapse
VERY FUNNY.
I have always had a lot of respect for this forum, but it is open to everybody and everything.
I started up my Gmail and got rebuffed when I tried to buy an apk and it required me to check-out at the Google store. I was told I didn't have a Google account so I wasn't able to buy the apk, but I am still able to send and receive Gmail. Now I want to be able to receive Gmail on my desktop, but I don't have the information to be able to complete that so that's why I asked for help.
Thanks.
kubla1 said:
VERY FUNNY.
I have always had a lot of respect for this forum, but it is open to everybody and everything.
I started up my Gmail and got rebuffed when I tried to buy an apk and it required me to check-out at the Google store. I was told I didn't have a Google account so I wasn't able to buy the apk, but I am still able to send and receive Gmail. Now I want to be able to receive Gmail on my desktop, but I don't have the information to be able to complete that so that's why I asked for help.
Thanks.
Click to expand...
Click to collapse
You can send and recieve mail because you have a gmail account. You can't buy anything at the store because you don't have a matching account in Google Checkout which you would have had to set up separately.
Based on the information you're providing - which I'll agree with the others comes off as either sketchy or aternatively completely computer clueless that's my best guess.
I rooted a guy that I work with phone and he didn't know his gmail password. He didn't use gmail, just set up the account to use the market and backup contacts.....bit he also was able to figure out when he opened the account because it was the same day he bought the phone.
Sent from my personal space
Thanks for the comments.
I just got off Google's site and I went through the steps to recover my username and recover my password and even though the recovery site accepts my username and my gmail address, it sends me a message that it's database has no reference to a password for either one.
I tried a site that was supposed to be the tech site to help me and after I asked my question, they asked me how much would I be willing to pay for the answer and suggested 37 dollars.
Well, I guess you know, I went no further.
My problem is, why does google recognize my gmail address, but has no reference to a password I would have to have to start the gmail account? ? ?
I know it's my fault I don't remember what I did to create the account, but why is there no record???
Google can't, or won't let me back in without some things I don't recall, but they seem to have no mechanism to let me correct my situation without just cancelling the account and creating a new one.
Thanks again for the dialog.
Are you serious? I can't believe that post (the one before this one)....its kinda making me very angry on how ridiculous this is lol.
Sent from my ADR6300 using XDA App
jaboswell said:
Are you serious? I can't believe that post (the one before this one)....its kinda making me very angry on how ridiculous this is lol.
Click to expand...
Click to collapse
Kinda smells like fresh troll doesn't it?

[solved] Sharing calendar dates

Is there an app or a way to sync calendars between two phones? Me and my GF would like to sync appointments between both phones automatically instead of having to text each other then add the appointment. It would be very convenient to have something like that.
My wife just has my google account on her phone. We share apps I buy and calendar entries are synced between the two. She just has it set to not sync my email.
jfcooley said:
My wife just has my google account on her phone. We share apps I buy and calendar entries are synced between the two. She just has it set to not sync my email.
Click to expand...
Click to collapse
I didn't know you could do that, but I don't want her having access to my accounts like that.
So then make a new Google account that you only use between you and her and have it only sync the calendar. That's the beauty of being able to have multiple Google accounts on the same device. Just make sure if you ever wipe/restore, that you don't enter that account back in first or else it becomes your primary account on the phone and makes it impossible (AFAIK) to remove the account from the phone without restoring again.
phatmanxxl said:
I didn't know you could do that, but I don't want her having access to my accounts like that.
Click to expand...
Click to collapse
I can see your issue. Being married we simply don't have anything to keep away from each other. However if I were just dating I wouldn't do it.
agent852 said:
So then make a new Google account that you only use between you and her and have it only sync the calendar. That's the beauty of being able to have multiple Google accounts on the same device. Just make sure if you ever wipe/restore, that you don't enter that account back in first or else it becomes your primary account on the phone and makes it impossible (AFAIK) to remove the account from the phone without restoring again.
Click to expand...
Click to collapse
Great idea I wasn't sure I could add a second google account to the phone thanks.
jfcooley said:
I can see your issue. Being married we simply don't have anything to keep away from each other. However if I were just dating I wouldn't do it.
Click to expand...
Click to collapse
Yea not really hiding anything, but my business is my business.
Didn't mean to imply that.
Like has been mentioned, just make a you&[email protected] and add it. Works well.
theres a way to do it....my wife and I do....
have her log into google calendar on the computer, there should be an option to share the calendar
sent from my sgs2e4gt
Cozi Family Organizer in Play Store can.
Sent on Nocturnal Venum rc1 using Tapatalk 2 Beta-5
Cozi was what I needed thanks.

Odd issue I can't find an answer for

If I do a sync with my google account ALL of my bookmarks from my laptop show up as bookmarks on my phone. That's a few hundred bookmarks. does anyone know why, or how this happens? I did tryout Google Chrome for a few days on my laptop but it sucked so I uninstalled it. Did Chrome copy all my bookmarks and store them somewhere in my google account or something? Any help or info would be greatly appreciated.
AdRock02gt said:
If I do a sync with my google account ALL of my bookmarks from my laptop show up as bookmarks on my phone. That's a few hundred bookmarks. does anyone know why, or how this happens? I did tryout Google Chrome for a few days on my laptop but it sucked so I uninstalled it. Did Chrome copy all my bookmarks and store them somewhere in my google account or something? Any help or info would be greatly appreciated.
Click to expand...
Click to collapse
what browser are you on your phone?
AdRock02gt said:
If I do a sync with my google account ALL of my bookmarks from my laptop show up as bookmarks on my phone. That's a few hundred bookmarks. does anyone know why, or how this happens? I did tryout Google Chrome for a few days on my laptop but it sucked so I uninstalled it. Did Chrome copy all my bookmarks and store them somewhere in my google account or something? Any help or info would be greatly appreciated.
Click to expand...
Click to collapse
Sometimes when you install a browser, it automatically imports your bookmarks from another browser.
Chrome most likely did that
fujirio said:
what browser are you on your phone?
Click to expand...
Click to collapse
I'm using the stock browser on the phone.
Wolfbeef123 said:
Sometimes when you install a browser, it automatically imports your bookmarks from another browser.
Chrome most likely did that
Click to expand...
Click to collapse
I kinda thought Chrome did it, but I don't have Chrome installed on my laptop at all anymore. It seems like they're all stored in my google account somewhere. So when I Sync my google account it automatically puts them all on my phone. I just can't find them stored in the google account anywhere, I have no idea where else to look, or if I'm completely missing something while looking through my account online.
AdRock02gt said:
If I do a sync with my google account ALL of my bookmarks from my laptop show up as bookmarks on my phone. That's a few hundred bookmarks. does anyone know why, or how this happens? I did tryout Google Chrome for a few days on my laptop but it sucked so I uninstalled it. Did Chrome copy all my bookmarks and store them somewhere in my google account or something? Any help or info would be greatly appreciated.
Click to expand...
Click to collapse
If you "signed into Chrome" on your laptop then your bookmarks were saved to your google account. If you want to get rid of them:
You can delete your synced information from your Google Account at any time, using the Google Dashboard.
1.Click the status area in the lower-right corner of the screen, where your account picture appears.
2.Select Settings and Help and find the "Users" section.
3.In the "Users" section, click Google Dashboard.
4.Go to the "Chrome sync" section in the dashboard and click Stop sync and delete data from Google.
Click to expand...
Click to collapse
dewey1973 said:
If you "signed into Chrome" on your laptop then your bookmarks were saved to your google account. If you want to get rid of them:
Click to expand...
Click to collapse
Dude, you rock. Thanks big time.
AdRock02gt said:
Dude, you rock. Thanks big time.
Click to expand...
Click to collapse
You are very welcome!

How did Facebook grab my details?

Hi all.
I have had a S9+ for the past week.
On Friday I logged in to my Facebook account via either Chrome or Edge.
I have since discovered that the pre-installed Facebook app has my log in details and is sending me notifications and tracking my location.
How on earth did the Facebook app grab my log in details from a browser?
Same account logged into Chrome as Android probably, synced login details between devices?
No idea, I disable that PoS app as soon as possible
Assuming you're coming from another phone, I believe some app information like log-in credentials can sync to the new phone as soon as you log in to your Google and/or Samsung accounts, which each store some level of backup information.
*Detection* said:
Same account logged into Chrome as Android probably, synced login details between devices?
No idea, I disable that PoS app as soon as possible
Click to expand...
Click to collapse
Yep, what's really stupid is not being able to uninstall it. There are too many apps around that are way better. It's top of my disable list along with email, Gmail and briefing.
*Detection* said:
Same account logged into Chrome as Android probably, synced login details between devices?
No idea, I disable that PoS app as soon as possible
Click to expand...
Click to collapse
Thanks for the reply (and apologies for the tardy reply).
I have never previously used a Facebook app and only ever accessed FB via a browser. I still cannot see how my details were transferred from the browser to the app.
d99x said:
Assuming you're coming from another phone, I believe some app information like log-in credentials can sync to the new phone as soon as you log in to your Google and/or Samsung accounts, which each store some level of backup information.
Click to expand...
Click to collapse
I went from a Microsoft Lumia to the S9. My Lumia was devoid of anything to do with Samsung or Google.
I would never install the FB app and hadn't even realised that it was pre-installed.
imaginarynumber said:
I went from a Microsoft Lumia to the S9. My Lumia was devoid of anything to do with Samsung or Google.
Click to expand...
Click to collapse
Your PC does though (Google)
Probably checks for any Facebook login cookies and then just uses them to sign you in. If you have FB Messenger that'll also try to get you logged in maybe Instagram or WhatsApp. It maybe gets your phone number it reads off the phone and associates it with your account?
I wouldn't be surprised if something else was going on behind the scenes. Facebook is one of if not the shadiest companies around. They automatically opt-in users for new features/services to gather more data on you.
Do you use anyothher Facebook owned apps like instagram? Or whatsapp. If it js your chrome browser then it is synced from you saving ur login credentials on a different PC
Sent from my SM-G960F using Tapatalk
Tachi91 said:
Probably checks for any Facebook login cookies and then just uses them to sign you in. If you have FB Messenger that'll also try to get you logged in maybe Instagram or WhatsApp. It maybe gets your phone number it reads off the phone and associates it with your account?
I wouldn't be surprised if something else was going on behind the scenes. Facebook is one of if not the shadiest companies around. They automatically opt-in users for new features/services to gather more data on you.
Click to expand...
Click to collapse
I don't use Instagram, FB messanger or WhatsApp, however I did install WhatsApp on my previous phone, the MS Lumia, for a week and then deleted it.
I can't help thinking that someone somewhere has fallen foul of the GDPR regulations by passing my data from one app to another without asking me for my permission.
imaginarynumber said:
I don't use Instagram, FB messanger or WhatsApp, however I did install WhatsApp on my previous phone, the MS Lumia, for a week and then deleted it.
I can't help thinking that someone somewhere has fallen foul of the GDPR regulations by passing my data from one app to another without asking me for my permission.
Click to expand...
Click to collapse
That's exactly what social media and the majority of companies do nowadays. They violate all kinds of regulations to track you.
Go thru your Facebook security settings and see what apps are currently connected or authorized to use your account.

Categories

Resources