The Frictionless Login Risk
Google Chrome features a built-in password manager designed to streamline your web browsing. By default, it utilizes a feature called “Auto Sign-in.” If you have your username and password saved for a specific website, the moment you navigate to that site’s login page, Chrome will instantly and automatically inject your credentials and log you in without requiring any physical interaction. While incredibly convenient, this is a severe security risk if you share your laptop with family members or colleagues. Anyone who borrows your computer can open a new tab, type in the URL of your bank or email, and Chrome will instantly log them into your account. You must force the browser to pause and wait for your explicit permission.
How to Turn Off Auto Sign-in
You can permanently revoke Chrome’s ability to inject credentials automatically via the Password settings.
- Open the Google Chrome desktop browser.
- Click the three vertical dots (⋮) in the top right corner and select Settings.
- In the left-hand sidebar, click on Autofill and passwords.
- In the main window, click on Google Password Manager.
- On the left side of the new Password Manager page, click on Settings.
- Locate the toggle switch labeled “Auto sign-in.”
- Toggle this switch to the Off position (the grey position).
Manual Confirmation
The change is instantaneous. Google Chrome will completely shut down the automatic login engine. Your passwords remain safely stored in the browser, but when you visit a login page, the fields will remain blank. You must now explicitly click on the username box and manually select your credentials from a drop-down menu, guaranteeing that no one can access your accounts simply by borrowing your laptop.