Chrome could soon let Gemini auto-fix your bad passwords

Keeping track of dozens of online logins and staying safe online gets exhausting fast. But it’s also very frustrating when reused passwords finally come back to bite you, so Google might be building an AI shortcut to clean up that mess. Instead of just warning you about weak credentials, Chrome could soon let Gemini automatically swap them out for you.

Spotted by browser tipster Leopeva64 on X, the feature is currently tucked behind a hidden flag in the latest Chrome Canary build on desktop. The flag is not available in Chrome Canary for Android as of this writing.

In my own testing on Windows 11, enabling the flag alters Chrome Password Manager’s layout. It swaps out the standard external “Change password” button for a prominent “Change it for me” option, complete with Gemini’s signature sparkle icon. Instead of forcing you to navigate to a site’s settings page, Google wants AI to handle the process end-to-end.

The screenshots below show how the feature looks in the latest Chrome stable (left) and Chrome Canary (right).

Chrome already has an automated password-change feature that can handle the process on supported websites when it detects a compromised password. This Canary experiment appears to take that capability further by letting Gemini handle weak and reused passwords.

This development isn’t entirely unexpected. Early remnants of AI password tools first surfaced in Gerrit commits back in 2024. However, seeing an active UI in Canary proves Google is refining the workflow. That said, it’s clearly in early development. When I clicked “Change it for me,” the manager got stuck displaying “Attempting to sign-in…” before throwing an error stating the password couldn’t be updated.

Automating credential changes with AI also brings obvious concerns. Handing root-level security changes to an assistant requires serious trust, especially given research showing AI password generation can be shockingly flawed. Automated scripts also notoriously struggle with custom two-factor authentication prompts or non-standard login forms. Still, if Google can iron out the technical kinks, this hands-off approach could be a massive time-saver for chronic password reusers.