188JILI Saved Passwords: Where Your Phone Keeps Them

Saved passwords are the sign-ins your phone remembers for you, and they are both a convenience and a risk if the phone or the account behind them is weak. This page shows where Google and Apple keep them, how to check one for a casino login and when to delete it. It is the fourth step in the order laid out on the mobile security order page.

Where your phone keeps saved passwords

Google and Apple each run a password tool that fills sign-in forms for you. The table lists what each help page says.

Check a saved casino login

Open the entry and read three things before you trust it.

1. The website name it lists. Compare it with the address in your browser bar, character by character, because a look-alike address is the oldest trick there is.
2. The username. If it is a mobile number, confirm it is the number on your account.
3. The password. Google’s Password Checkup, found in Google Password Manager under Checkup, tells you whether it is exposed in a data breach or weak and easy to guess. Apple’s Passwords app lists weak and leaked ones under Security.

The lobby’s registration form says a password is 6 to 12 letters and digits with no special characters. If your manager suggested a longer one with symbols, edit the suggestion to fit the form and save the result.

Show, edit or delete an entry

Google’s help page prints the Chrome steps for a computer, and its Android and iPhone tabs cover the phone. On a computer the path is More, Passwords and autofill, then Google Password Manager, then the password you want. From there you can:

• Show it with Show password, after confirming it is you.
• Edit it, then Save.
• Delete it.
• Export your passwords, from Settings, with Download file.

On an iPhone the Passwords app holds the same actions, and Apple’s page says to choose Security and select an account with a weak or compromised password to change it. If you turn iCloud Keychain off, Apple says passwords are then stored locally on the device.

When to delete a saved password

Delete or replace an entry when any of these applies.

1. A checkup flags it as exposed, weak or reused. Google says that if one password is reused, a stolen one can compromise many accounts.
2. Chrome alerts you that a username and password pair appeared in a data leak. Google recommends changing it as soon as you can.
3. The entry sits under an address you do not recognise.
4. You are selling the phone or sharing it with someone.
5. Your phone was lost, or you installed a file from outside the store. The sideloading and your passwords page shows what a phone loses when a file skips the store.

What apps and sites can see

Apple’s security guide says Password AutoFill exposes no credential information to an app until a user consents, and that apps reach saved passwords only with approval from the app developer and the website administrator plus your consent. Google’s page adds that a saved note has the same protection as the password it sits with.

Protect the store itself. Google recommends adding recovery info and turning on 2-Step Verification for your Google Account, and Apple asks for two-factor authentication on your Apple Account before iCloud Keychain. Chrome can ask for biometric authentication before it fills a password, though Google says that is off by default. Keep Play Protect on, as the Google Play Protect scan page explains, and read the antivirus choices for Android page if malware worries you.