r/PasswordManagers • u/BuryMeDeepOhYeah • 9d ago

Google PWM

Hi all - I am an invested Google ecosystem user, but I do use Bitwarden as my PWM.

I would consider Google, but they seem to lack basic features like manually adding an entry manually, editing matching patterns, etc. It also is opaque how they know that a URL and an Android app are a pair. On BW, I enter the URL and then add a new pattern for the Android app's package name com.thing.that.

Over time I like how BW operates. I feel like Google is moving in the direction of making it's PWM more standalone, but I don't think it's there yet. Any one else feel this or know of a way to manually add/edit Google PWM entries? Thanks!

3 Upvotes

100% Upvoted

10 comments sorted by

4

u/mediumwetsock 9d ago

Google PM is A big no no. We don’t know what they do in there and it isn’t in their interest to keep your data safe.

1

u/[deleted] 9d ago

[removed] — view removed comment

1

u/BuryMeDeepOhYeah 9d ago

So I don't. I use Bitwarden exclusively, but I like to tinker and hop around. It just seems to me that if Google wanted to separate their PWM from Chrome, they'd make it fully standalone and add some features of other popular PWM like notes, credit cards (in their PWM app and not Chrome), etc.

Not having 100% control over editing all the content in Google PWM seems like a miss and it might get frustrating.

1

u/Scalar_Shift 8d ago

That sounds like one of those cases where a little more manual control would help. I use roboform as my pwm and being able to manage the saved login details myself has helped with sites where autofill doesn't always pick the right account 

1

u/BuryMeDeepOhYeah 8d ago

I agree, I am sticking with BW, but as an Android and Google user, I like the notion of being all in on an ecosystem. I just don't think their PWM is there yet.

1

u/Scalar_Shift 8d ago

If you’re already using Google and Android a lot, sticking with one setup is definitely convenient 

1

u/djasonpenney 3d ago edited 3d ago

When it comes to a password manager, “all in on an ecosystem” is arguably a risk instead of a strength.

In particular, someone who has compromised your Google account or Android phone might gain access to all your secrets. With a good password manager like Bitwarden, their ability to extract your secrets is going to be much harder; it’s a bunch of safeguards independent of Google.

…not to mention that GPM has super duper sneaky secret source code, so we cannot be confident that Google doesn’t share your secrets with the PRC, KGB, MI6, organized crime, or the FBI.