{
  "slug": "chrome",
  "name": "Chrome",
  "maker": "Google",
  "category": "browsers",
  "verdict": "o",
  "answer": "Only if you set a sync passphrase. Chrome connects to sites securely by default, but Google holds the key to the passwords, history and bookmarks you sync. With your own passphrase, Google can't read them.",
  "title": "Is Chrome encrypted? Sync, passwords and HTTPS",
  "description": "Google can read the passwords, history and bookmarks Chrome syncs unless you set your own sync passphrase. Sites load securely by default.",
  "parts": [
    {
      "key": "globe",
      "status": "y",
      "words": "Only you and the site",
      "note": "Since October 2026, Chrome asks before it opens a public site that has no secure connection.",
      "sources": [
        2,
        3
      ],
      "label": "Connection to sites"
    },
    {
      "key": "pass",
      "status": "o",
      "words": "Only you, once you turn it on",
      "note": "Google holds the key by default, and a sync passphrase or on-device encryption puts the key in your hands instead.",
      "sources": [
        1,
        4
      ],
      "label": "Saved passwords"
    },
    {
      "key": "hist",
      "status": "o",
      "words": "Only you, once you turn it on",
      "note": "With a passphrase Google can't read it, but Chrome then syncs only the addresses you type, not your full history.",
      "sources": [
        1
      ],
      "label": "History and open tabs"
    },
    {
      "key": "mark",
      "status": "o",
      "words": "Only you, once you turn it on",
      "note": "Sealed once you set a sync passphrase.",
      "sources": [
        1
      ],
      "label": "Bookmarks"
    }
  ],
  "extra_parts": [],
  "keys": "Google holds the keys to your synced data, unless you set a sync passphrase that only you know.",
  "can_see": "Without a passphrase, everything you sync, and Chrome history saved to Web & App Activity can shape Google's other products; a passphrase doesn't cover payment methods and addresses from Google Wallet.",
  "business": null,
  "fix": {
    "title": "Set a sync passphrase, once",
    "steps": [
      "On your computer, open Chrome and sign in with your Google Account.",
      "Select More › Settings › You and Google, then select your account name.",
      "At the bottom, select Encryption options.",
      "Choose Use your own passphrase to encrypt all the Chrome data in your Google Account, enter it twice, then select Save."
    ],
    "after": "Takes a minute. You'll need the passphrase on every device. To change or remove it later, Google deletes the locked data from its servers, so export your passwords first. With a passphrase, Chrome syncs only the addresses you type, not your full history."
  },
  "fix_line": "Set a sync passphrase: Settings › You and Google › your account › Encryption options.",
  "sections": [
    {
      "id": "is-chrome-sync-encrypted",
      "q": "Is Chrome sync end-to-end encrypted?",
      "a": "Not by default. Google says your synced data is always encrypted, but only a sync passphrase lets you keep it in Google's cloud without Google being able to read it [1]. For passwords, Google says the key is stored in your Google Account, and Google uses it to unlock them [4].\n\nGoogle says a passphrase covers all the data Chrome syncs [4], except payment methods and addresses from Google Wallet [1]."
    },
    {
      "id": "does-chrome-use-https-by-default",
      "q": "Does Chrome use HTTPS by default?",
      "a": "Yes. In October 2026, Google turned on Chrome's Always Use Secure Connections setting for everyone [2]. Chrome tries a secure connection first and asks before it opens a public site that doesn't offer one [2][3].\n\nOnce you say yes, Chrome stays quiet about that site unless you haven't visited it for two weeks [2]. Local addresses, like your router's page, don't get the warning by default [2][3]. You can turn the setting off [3]."
    },
    {
      "id": "can-google-see-my-chrome-passwords",
      "q": "Can Google see my passwords in Chrome?",
      "a": "By default, yes. Google's help page says the key to your saved passwords is stored in your Google Account, and Google uses it to unlock them for you and to check them for leaks [4].\n\nWith on-device encryption, you hold the key instead, and Google says no one but you can access your passwords [4]. You unlock them with your Google password or your phone's screen lock. Once it's on, it can't be turned off [4]."
    },
    {
      "id": "what-changes-with-a-chrome-sync-passphrase",
      "q": "What changes if I set a Chrome sync passphrase?",
      "a": "You need the passphrase on every new device, and Chrome syncs only the web addresses you type, not your full history [1]. You can't see your passwords at passwords.google.com, and your feed stops suggesting things based on the sites you visit [1].\n\nChanging the passphrase deletes the locked data from Google's servers and signs you out everywhere, so Google suggests exporting your passwords first [1]."
    }
  ],
  "sources": [
    {
      "title": "Get your bookmarks, passwords, and more on all your devices",
      "publisher": "Google",
      "url": "https://support.google.com/chrome/answer/165139",
      "read": "2026-10-25"
    },
    {
      "title": "Chrome Now Warns Before Insecure HTTP Connections",
      "publisher": "Google",
      "url": "https://blog.google/security/chrome-now-warns-before-insecure-http-connections/",
      "read": "2026-10-25"
    },
    {
      "title": "HTTPS by default",
      "publisher": "Google",
      "url": "https://security.googleblog.com/2025/10/https-by-default.html",
      "read": "2026-10-25"
    },
    {
      "title": "Get started with on-device encryption",
      "publisher": "Google",
      "url": "https://support.google.com/accounts/answer/11350823",
      "read": "2026-10-25"
    }
  ],
  "changes": [
    {
      "date": "2026-10-25",
      "text": "First published."
    }
  ],
  "related": [
    "safari",
    "firefox",
    "edge",
    "brave",
    "google-password-manager"
  ],
  "url": "https://isitencrypted.com/chrome/",
  "checked": "2026-10-25"
}