How to Enable On-Device Encryption in Google Chrome

On-device encryption in Google Chrome locks your saved passwords to your specific hardware, so nobody can read them without your device unlock code. It is available in Chrome version 119 and newer. The decryption key stays on your local machine instead of being kept in the cloud.

Passwords normally sync to Google’s servers. This setting makes Chrome protect them behind your Windows screen lock or fingerprint reader. If Chrome is older than version 119, update it first, because the option will not appear otherwise. To check, open the Chrome menu and go to Help › About Google Chrome. Chrome will update itself and ask you to relaunch.

How to enable on-device encryption

On-device encryption protects your saved passwords and payment cards by locking them with your Windows password or device sign-in. To turn it on, open the main Chrome menu and go to Settings ⚙️. Then open the Google Password Manager settings and set up on-device encryption, so Chrome encrypts everything locally before syncing.

The steps below take a few minutes. You need to be signed in to Chrome with your Google Account, and you need a way to confirm your identity on this device, such as a Windows PIN, a password, or a fingerprint reader. Use a computer you control, and keep your phone or tablet nearby in case Chrome asks for it.

1. Open the Google Chrome browser. Check that your profile picture or name appears at the top right, which shows you are signed in.
2. Click the Customize and Control button (the 3 vertical dots) in the top right corner. A drop-down menu opens.
3. Select Settings. The Settings ⚙️ page opens in a new tab.

1. On the left panel, click Autofill and passwords. The autofill options appear on the right.

1. Click the Google Password Manager tile on the right. The Password Manager page opens, listing your saved passwords.

Alternatively, paste chrome://settings/passwords into the address bar and press Enter. This skips the earlier menus and takes you straight to the same page.

chrome://password-manager/passwords

1. Select Settings on the left menu. The Password Manager settings page opens.
2. Click the Set up on-device encryption link. If you do not see it, update Chrome to version 119 or newer and confirm you are signed in. The option can also be missing if encryption is already set up on this account.

1. Click Next to continue. A short setup screen explains what the feature does.

1. Read the "Things to consider" list and click Set up. Do not rush this part. It explains the trade-offs, including what happens if you lose the devices that hold your key.

1. If your device supports it, you can use a passkey. Windows Hello authentication will help verify your identity.

1. You can use your phone or tablet as your unique key. Pick this option if your PC has no fingerprint reader or other supported sign-in method.

1. A prompt will appear on your device. Confirm your identity using a fingerprint, PIN, or your screen lock. The prompt may take a few seconds to show up, so wait before trying again.

1. Once verified, click Continue to create your passkey. Chrome creates the key that protects your passwords.

1. Click Done to finish. The setup window closes and you return to the Password Manager settings.

Your passwords are now encrypted on your device.

To confirm, go back to Google Password Manager › Settings The on-device encryption option should no longer offer to set it up. If you later want to review or remove it, use that same Settings page. The exact wording of that option can vary between Chrome versions.

Summary

On-device encryption adds a strong layer of security to your browser. Turning your device into a physical key ensures that only you can access your saved passwords. This is a vital step for anyone who wants to keep their private information safe from hackers.

The trade-off is recovery. Because the key lives on your devices and not on Google's servers, Google cannot restore your passwords if you lose access to them. Keep at least one trusted device or passkey available, and keep a separate record of your most important logins.

Reference: Google Support