Chrome has quietly collected every password you've ever typed 'save' to. Graduating to a dedicated password manager starts with exporting them all.
Updated August 09, 2026, after a fresh review, with updated visuals and links.
The export is one CSV file with your entire login life in plain text: freeing, fragile, and needing careful handling for exactly one afternoon.
Short version: Find the export button first, then prove you're you. Details below.
Doing it properly
- Find the export button. Chrome, three dots, Passwords and autofill, Google Password Manager, Settings, then 'Export passwords' (or 'Download file' near the export option). Desktop Chrome required, mobile exports don't exist by design.
- Prove you're you. Windows/Mac asks for the computer's login password before revealing anything: anyone walking up to your unlocked laptop can't export your life without this second key.
- The CSV: treat it like a bag of diamonds. The file contains every URL, username and password readable in any text editor. Save it somewhere private, DON'T email it, DON'T cloud sync it, and plan to delete it within the hour.
- Open it once to confirm it's complete
- Plain text means anyone with the file has everything
- Import into your password manager. Every serious manager (Bitwarden, 1Password, Dashlane) has Import from Chrome: point it at the CSV, watch your whole login history teleport into the vault, verify a few entries work.
- Delete the CSV properly. Delete the file, then empty the recycle bin/trash. Some swear by secure-erase tools; the bin empty on an SSD suffices for household threats. The export file should never outlive the migration.
- Switch Chrome's saving off (optional, recommended). Passwords and autofill settings: stop offering to save passwords in Chrome now that a manager does it, avoiding the two-systems-conflict confusion. Chrome's existing saved passwords can also be wiped from the same settings after the vault is verified.
Good habits to keep
- iPhone users: Google Password Manager syncs to Chrome on iOS or its autofill provider option, your logins follow even in the Apple world.
- Do this migration on a quiet private computer, not the office shared machine.
- While you're here: the manager's import marks the start of the security upgrade era from our password manager guide: unique strong password generation from day one.
Before you ask
Can I do it from my phone?
Not CSV exports: Google's design keeps export to desktop. The Phone flow: sync to desktop Chrome signed into the same account, export from there.
Is exporting safe from Google's side?
Yes: the file generates locally, over no network. The risk profile is entirely about where that file lives next, which is your department.
Keep reading
- How to Make Chrome Your Default Browser (Windows, Mac, Android, iPhone)
- How to Clear Cache and Cookies in Chrome (And When You Shouldn't)
- How to Buy a Used Electric Car (The Battery Check That Matters More Than Mileage)
Export, import, verify, delete. One afternoon moves years of logins from browser memory into a vault built for the job.
