TLDR InfoSec · MISCELLANEOUS
GOOGLE EXPANDS CHROME AUTOFILL TO PASSPORTS AND LICENSES, BUT IS IT SAFE?
Summary from the TLDR InfoSec newsletter
Google Chrome now supports autofill for sensitive documents like passports and driver's licenses, with encryption and user consent. However, security experts warn that this centralizes critical identity data in a vulnerable location, contradicting cybersecurity advice against storing such info in browsers. Malware like Shuyal Stealer targets browser-stored credentials, and Chrome autofill data isn't stored securely. Security teams should advise against storing sensitive IDs in autofill, enforce policies to restrict this in workplaces, monitor for info-stealer malware, and recommend dedicated password managers with stronger encryption instead of browser storage.