Where Does Chrome Store Passwords on Windows?
Chrome saves your passwords to a specific file on your Windows hard drive. Understanding where that file is, how it's encrypted, and what format it uses helps you back it up, recover it, and understand exactly what Chrome is doing with your login credentials.
Quick Answer: Chrome Password File Location
Chrome stores passwords in a file called Login Data at this path:
C:\Users\[YourUsername]\AppData\Local\Google\Chrome\User Data\Default\Login Data
It's an SQLite database encrypted with the Windows Data Protection API (DPAPI). You cannot read the passwords directly — you need Chrome to be running, or a tool that can decrypt DPAPI-encrypted data.
📖 In This Guide
Exact File Location
Chrome stores all saved passwords in a single file named Login Data. The full path is:
C:\Users\[YourUsername]\AppData\Local\Google\Chrome\User Data\Default\Login Data
To navigate there directly:
- Press Windows + R to open the Run dialog.
- Type
%localappdata%\Google\Chrome\User Data\Defaultand press Enter. - The folder opens. You'll see a file called Login Data — this is Chrome's password database.
Note: AppData is a hidden folder by default. If you're navigating manually via File Explorer, enable View → Show → Hidden items first.
File Size
The Login Data file is typically between 50 KB and a few MB depending on how many passwords are saved. The file size alone isn't an indicator of how many passwords are stored — Chrome also keeps metadata, settings, and deleted entry records in the same database.
How Chrome Encrypts Passwords
Chrome does not store passwords in plain text. The encryption has evolved across Chrome versions:
Chrome 80 and Later (Current Method)
Since Chrome 80 (released February 2020), Chrome uses a combination of:
- AES-256-GCM encryption for the password data itself
- A locally stored encryption key saved in a file called Local State (in the parent
User Datafolder) - Windows DPAPI to protect the Local State key
This means the decryption chain is: DPAPI decrypts the key in Local State → that key decrypts the passwords in Login Data. Without both files and access to the original Windows user account, the passwords cannot be decrypted.
Chrome Before Version 80 (Older Method)
Older Chrome versions used Windows DPAPI directly on each individual password entry in the Login Data database. Recovery tools written for pre-80 Chrome may not work with current Chrome.
Other Chrome Password-Related Files
| File | Contents | Location |
|---|---|---|
| Login Data | The main password database (SQLite) | Default\ |
| Login Data-journal | SQLite write-ahead log (temp file) | Default\ |
| Local State | Contains the AES key (DPAPI encrypted) | User Data\ |
| Preferences | Chrome settings including autofill preferences | Default\ |
If you're backing up Chrome passwords by copying files, you need both Login Data and Local State — the database alone is useless without the key file.
How to Access Your Chrome Passwords
You cannot open Login Data directly in a text editor and read passwords. There are three practical ways to access the stored passwords:
Option 1: Chrome's Built-in Password Manager (Easiest)
Go to chrome://password-manager/passwords in Chrome. Click the eye icon next to any entry to view the password. You'll be prompted to confirm your Windows account PIN or password.
Option 2: Google Passwords Website
If you're signed into Chrome with a Google account and have sync enabled, visit passwords.google.com to view and manage all synced passwords from any browser.
Option 3: SterJo Chrome Passwords (for Bulk Access and Export)
SterJo Chrome Passwords reads and decrypts the Login Data file using the same DPAPI chain Chrome uses, and displays all saved passwords in a plain list — perfect for bulk viewing, backup, or export.
🔍 SterJo Chrome Passwords
Free • Portable • Reads Chrome's Login Data directly
- Instantly decrypts and displays all Chrome saved passwords
- Works with current Chrome encryption (v80+)
- Export all passwords to CSV for import into any password manager
- No installation required — run from a USB drive
How to Back Up Chrome Passwords
There are two approaches — file backup and CSV export:
File Backup (Preserves All Data)
Copy both files to your backup location:
%localappdata%\Google\Chrome\User Data\Default\Login Data%localappdata%\Google\Chrome\User Data\Local State
To restore: copy both files back to the same locations on the same Windows user account. The DPAPI encryption is tied to the user account, so this only works on the same PC and account.
CSV Export (More Portable)
Use Chrome's built-in export (chrome://password-manager/passwords → ⚙️ → Export) or SterJo Chrome Passwords to export a CSV. This file can be imported into any browser or password manager on any PC, making it more portable than the raw file backup.
⚠️ Important: The CSV export contains passwords in plain text. Delete it immediately after importing into your target destination. Never leave it on your desktop or in the Downloads folder.
Chrome Profiles and Multiple Users
If you use multiple Chrome profiles (e.g. one for work, one personal), each profile has its own Login Data file stored in a separate folder:
C:\Users\[YourUsername]\AppData\Local\Google\Chrome\User Data\Profile 1\Login Data
C:\Users\[YourUsername]\AppData\Local\Google\Chrome\User Data\Profile 2\Login Data
The first profile is always stored in the Default folder. Additional profiles use numbered folders. SterJo Chrome Passwords and SterJo Browser Passwords scan all profiles automatically — you don't need to find each folder manually.
📚 Related Guides
How to Export Chrome Passwords to a Password Manager
Step-by-step guide to move your Chrome passwords to KeePass, Bitwarden, or 1Password.
Chrome Passwords vs Google Password Manager
What is the difference between local Chrome passwords and Google's cloud sync?
Frequently Asked Questions
Can I open the Login Data file in a text editor to read my passwords?
No. The file is a binary SQLite database, not a text file. Even if you open it with an SQLite browser, the password column contains encrypted binary data — not readable text. You need a tool that can perform the DPAPI decryption chain to get the plain text passwords.
Does Chrome's Login Data file get deleted when I clear browsing data?
Clearing browsing data in Chrome (history, cookies, cache) does not delete the Login Data file or your saved passwords — unless you specifically check the "Passwords and other sign-in data" option in the Clear browsing data dialog. The passwords are stored separately from browsing history.
Can another program on my PC read my Chrome passwords without my knowledge?
Yes. Any program running under your Windows user account can access and decrypt the Login Data file, because the DPAPI encryption is tied to your account — not to Chrome specifically. This is why malware often targets Chrome's password database. It is an important reason to use a dedicated password manager with stronger protections.
If I copy Login Data to a new PC, can I read the passwords?
No. The DPAPI encryption uses keys that are unique to your Windows user account and machine. Copying the Login Data file to a different user account or PC means the decryption will fail — the keys no longer match. Use CSV export instead for portable backups.
Where are Chrome passwords stored if I use Chrome on a different drive?
Chrome's user data is always stored under the Windows user profile, regardless of which drive Chrome is installed on. The Login Data path uses the Windows AppData location, which is determined by your user account, not Chrome's installation directory.
Does Chrome Canary or Chromium store passwords in the same location?
No. Each Chrome variant uses a different AppData folder: Chrome Canary uses AppData\Local\Google\Chrome SxS\User Data, and Chromium uses AppData\Local\Chromium\User Data. SterJo Browser Passwords handles all Chromium-based browsers automatically.
Now You Know Where Chrome Keeps Its Secrets
Chrome's Login Data file is the single source of truth for all locally stored passwords. Understanding its location and encryption helps you back up your credentials properly, recover them when needed, and make informed decisions about your password security strategy.
For the easiest way to access, view, and export everything Chrome has saved, SterJo Chrome Passwords handles all the decryption automatically — no SQLite browsers or DPAPI knowledge required.
📋 Popular Guides
- ChromeRecover Chrome Passwords
- ChromeExport Chrome Passwords
- FirefoxRecover Firefox Passwords
- PasswordsBack Up Before Reinstall
🔗 Related Tools
💡 Quick Tip
Use SterJo Browser Passwords to export Chrome, Firefox, Edge, and Opera passwords all at once — no need to locate each browser's data folder separately.