I was a Bitwarden user until last year before purchasing Google Pixel 7 Pro. I was happy when Google provided their own solution, Google Password Manager (GPM) integrated into the phone itself and i moved all my passwords from Bitwarden to GPM. Even i switched from Authy to Google authenticator to have a integrated and unified experience.

3 days ago, i felt chrome in my Pixel was bit sluggish and thought of clearing the history and cache. By default the "saved password" were checked when i clicked on clear option. Though i know the GPM passwords are accessible via chrome in other platforms and non-pixel phones, i never thought that this would delete all my passwords from the vault. Cherry on the top is the chrome didn't prompt or requested for additional authentication, like fingerprint before cleaning out the vault.

I was shocked to see an empty vauly yesterday. Google support said they cannot help retrieve the passwords and it's a gone case. Luckily i remember the master password of Both Bitwarden and Authy, and i immediately switched back to Bitwarden.

I mean who in the right mind designed a security tool this way. Clearing the vault straight from the browser without even warning the user? What is even the point of having the GPM burried inside the phone security settings when you can easily delete the passwords from a browser click? I was so disappointed because i felt GPM was Nice. Never again.

It works well for me. I use 2 Yubikeys (1 as a backup) to secure my Google account.