Google is testing a new security safeguard in Chrome for Android that requires users to perform a biometric scan before the browser autofills saved passwords. First spotted by user Leopeva64 on X, the feature has resurfaced in the latest Chrome Canary build under a dedicated flag labeled 'Biometric reauth for password filling.'
Closing the Unlocked Phone Vulnerability
When the experimental flag is active, selecting a stored credential prompts a fingerprint or face verification before Chrome inputs the credentials into a website. This step addresses a lingering gap in mobile browser security where unlocking an Android device granted immediate access to every stored account password in Chrome.
While third-party password managers and native Android autofill services often mandate biometric verification, Chrome has traditionally managed browser autofill without requiring an additional identity check at the input point.
Revival of a Paused Security Initiative
This is not Google's first attempt to introduce biometric checks to Chrome autofill. The company initially tested a similar protection over a year ago before removing it before it reached a stable build.
The re-emergence of the feature in the Canary channel indicates that Google is active on the project once more. Apple's iOS platform already enforces mandatory Face ID or Touch ID checks when autofilling saved credentials within Safari.
Current Limitations and Availability
The biometric verification requirement is currently restricted to Chrome Canary, Google's experimental release branch used for testing early code. Google has not officially announced a target date or confirmed launch plans for bringing biometric autofill to the stable channel of Chrome on Android.
AI-generated editorial illustration; not a documentary photograph.
Source: Chrome for Android might soon force a biometric scan before filling your passwords
SIGNAL TITANS
Leave a Reply