Recovering a password saved months ago on a browser or phone requires knowing where each system stores these credentials. The locations vary depending on the device, browser, and operating system version. This article compares the access paths across major environments and highlights a recent game-changing development on Android.
Access Path to Saved Passwords by Device and Browser
| Environment | Access Path | Includes Passkeys |
|---|---|---|
| Chrome (desktop) | Settings > Autofill > Password Manager | Yes (recent versions) |
| Chrome (Android) | Menu > Settings > Password Manager | Yes |
| Chrome (iOS) | Menu > Settings > Password Manager | No (managed by iCloud Keychain) |
| Android 14+ | Settings > Security & Privacy > Passwords, Passkeys, and Autofill | Yes |
| Safari (macOS) | Safari > Preferences > Passwords | Yes |
| Safari (iOS) | Settings > Passwords | Yes |
| Firefox (all platforms) | Settings > Privacy & Security > Logins and Passwords | No |
| Microsoft Edge | Settings > Profiles > Passwords | Yes (via Microsoft Authenticator) |
The takeaway: each browser stores its credentials in its own silo. A password saved in Firefox will not appear in Chrome, and vice versa. Therefore, before searching for a lost credential, you need to identify which browser was used to save it.
See also : The best solutions to find a job quickly in 2024
To view the list of saved passwords on CGI Network, each secure location is detailed with screenshots by system.
Read also : How to Easily Access the Alis BNP Paribas Extranet for Employees
Android 14 and the Unified Password and Passkey Menu
Articles discussing password management on Android often focus on the Google manager accessible from Chrome. The situation has changed with recent versions of the system.
Since Android 14, Google has grouped traditional passwords and passkeys into a unified menu. The path is as follows: Settings, then Security & Privacy, then Other Security Settings, then Passwords, Passkeys, and Autofill.
This centralization has a direct practical consequence. Previously, FIDO2 passkeys and traditional text credentials were housed in separate menus. Now, a single screen displays both types of authentication. If you have set up a passkey for a service (Google, Apple, certain banks), it appears in the same place as your traditional passwords.
Why This Distinction Matters
A user searching for “their passwords” on a recent phone may not recognize a passkey entry in the list. Passkeys are not strings of characters that can be copied and pasted. They rely on a pair of cryptographic keys linked to the device.
A passkey cannot be exported like a traditional password. This limitation means that when changing phones, only text passwords are transferred via Google backup. Passkeys must be recreated on the new device unless they are synchronized via the Google account on compatible devices.
CSV Export from Google Manager: Finding Credentials Outside the Browser
The Google password manager offers a CSV export feature. From passwords.google.com or from Chrome settings, you can download a file containing all your credentials.
- The CSV file is not encrypted: anyone with access to the file can read your passwords in plain text. It should be deleted after use or stored in a secure space.
- The export allows you to import your credentials into a third-party manager (Bitwarden, Proton Pass, KeePass, among others) without manual re-entry.
- The import works the other way as well: a CSV file from another manager can be injected into the Google manager.
This possibility changes the answer to the question “where to find your passwords.” They are not only in a browser or system menu. An already completed CSV export may linger in a downloads folder, on a desktop, or in the cloud. This forgotten file poses a major security risk.
Integrated Manager or Third-Party Manager: Concrete Access Differences
Integrated managers (Google, iCloud Keychain, Microsoft) operate by ecosystem. If you use Chrome on a Windows computer and Safari on an iPhone, your passwords are scattered between two managers that do not communicate.
A third-party manager like Bitwarden, Proton Pass, or KeePass stores credentials in a single vault, accessible via a browser extension, a mobile app, or a desktop client. Access to passwords no longer depends on the device or browser used.
What Access Path According to the Third-Party Manager
- Browser extension: click on the manager icon in the toolbar, then search for the relevant site in the vault.
- Mobile app: open the app, authenticate (master password, biometrics), then browse the list or use the search function.
- Desktop client (e.g., KeePass): open the database file (.kdbx) with the master password. The file can be stored locally or synchronized via cloud.
However, third-party managers require memorizing a master password. If this is lost and no recovery method has been set up, the entire vault becomes permanently inaccessible.
Thus, the location of your passwords depends on two choices made beforehand: the browser or application used to save them, and the type of manager (integrated or third-party). Identifying these two parameters before searching for a lost credential helps avoid searching in the wrong place.