Most people save dozens of passwords inside their phone or browser and never think about whether those passwords are actually safe.
The good news is that a password check tool is already built into the devices and browsers most people use every day, including Apple Passwords on iPhone and Mac, Google Password Manager on Android and Chrome, and the password features inside Safari.
This article walks through where to find these checks, what the warnings mean, and what to do once a weak, reused, or compromised password shows up.
Contents
- What a Built-In Password Checker Actually Does
- How to Check Passwords on iPhone
- How to Check Passwords on Android and Chrome
- How to Check Passwords on a Computer Using Chrome
- What About Safari
- What to Do When a Password Gets Flagged
- If the Checkup Tool Does Not Work or Shows Nothing
- Things to Watch Out For
🔍 What a Built-In Password Checker Actually Does
Before opening any settings menu, it helps to understand the scope of these tools.
A built-in password checker only reviews the passwords that are actually saved inside that specific manager.
It does not scan every password a person has ever typed, and it does not look at logins saved somewhere else.
On an iPhone, Apple Passwords checks the passwords stored in Apple’s own password manager, which is the same system that can fill in logins in Safari and other apps.
It looks for three main problems: a weak password that would be easy to guess, a password reused across multiple accounts, and a password that matches one found in a known data leak.
On Android and in Chrome, Google Password Manager runs a similar review, often called a Checkup, and it can flag passwords as exposed, weak, or reused.
The core idea is the same across Apple and Google: the tool spots a pattern or a known problem, but it does not change the account password on the actual website or app for the user.
That final step of updating the password with the bank, email provider, or shopping site still has to happen manually, usually with a link the checker provides.
It is worth keeping in mind that a password saved only in Google Password Manager will not show up in Apple’s checker, and the reverse is true as well.
Anyone who uses both an iPhone and an Android tablet, or both Safari and Chrome, may need to check both systems separately to get a full picture of saved password health.
💡 Key point: A password checker only reviews passwords saved in that specific manager, so using multiple browsers or devices may mean checking more than one place.
⚙️ How to Check Passwords on iPhone
On an iPhone, the password check lives inside the Passwords feature, which Apple built directly into iOS settings.
Starting with iOS 18, Apple introduced a dedicated Passwords app, while earlier versions keep this feature tucked inside the Settings app instead.
Either way, the underlying security check works the same, even if the exact screen name is slightly different.
- Open the Passwords app (iOS 18 or later), or Settings → Passwords on iOS 17 and earlier.
- Authenticate using Face ID, Touch ID, or the device passcode when prompted.
- Tap Security or Security Recommendations, since the exact label can vary by iOS version.
- Review any accounts marked as weak, reused, or found in a known data leak.
- Tap an account to see details, then use Change Password on Website if that option appears.
If the menu names look slightly different, it helps to use the search bar inside the Settings app and type Passwords to jump straight to the right screen.
Apple groups flagged accounts so a quick glance shows how many issues exist, and tapping into each one reveals why it was flagged, whether that is reuse, weakness, or a leak match.
The Change Password on Website button, when available, opens the service’s own password-change page, but the actual update still has to be completed there, not inside the Passwords screen.
Because this feature touches saved logins and personal accounts, it is a good idea to check Apple’s official support page or contact Apple support directly for the exact steps on a specific iOS version.
📱 How to Check Passwords on Android and Chrome
On an Android phone, the password checker is part of Google Password Manager, which is usually reached through the Chrome browser.
Because Android devices come from different manufacturers, the exact path through system settings can vary, but the Chrome route tends to stay consistent.
- Open Chrome on the Android device.
- Tap the three-dot menu, then Settings, then Google Password Manager.
- Tap Checkup and review the results that appear.
- For any flagged account, follow the on-screen prompts to change the password on that service.
Google also documents an alternate path through the phone’s own settings app: Settings > Google > All services > Autofill and passwords > Autofill with Google.
This route can look different depending on the Android version and the phone maker, since some manufacturers customize their settings menus more than others.
A simpler option that works regardless of device is visiting passwords.google.com directly in any browser and selecting Go to Password Checkup.
This web-based route signs in with the Google account and shows the same checkup results, which can be useful if the Settings menu labels do not match what is expected.
The Checkup results typically sort flagged passwords into categories like compromised, weak, and reused, making it easier to prioritize which accounts to fix first.
Since this involves Google account security, it is worth checking Google’s official support pages for the most current menu layout if something looks different from what is described here.
💡 Key point: The fastest way to reach a Google Password Checkup on any device is typing passwords.google.com into a browser and signing in.
💻 How to Check Passwords on a Computer Using Chrome
The same Google Password Manager checkup is available on a desktop or laptop computer, and the steps are nearly identical to the Android version.
This can be useful for anyone who manages accounts on a bigger screen or who saves passwords while browsing on a work or home computer.
- Open Chrome and select the three-dot menu, then Passwords and autofill, then Google Password Manager.
- Select Checkup in the left-hand menu.
- Review any exposed, weak, or reused passwords listed in the results.
- Change the flagged passwords directly on the affected websites or apps.
For anyone who does not use Chrome as their main browser, Google still makes this checkup accessible through passwords.google.com.
Selecting Go to Password Checkup and then Check passwords runs the same review, though signing into the Google account may be required first.
This web version can be handy on a shared or borrowed computer where someone does not want to open their full Chrome profile.
It is also useful for comparing results across devices, since the checkup pulls from the same Google account regardless of which computer or browser accesses it.
One common point of confusion is that Chrome’s built-in password manager and Google’s account-level password manager are the same system, just reached through different doors.
Signing out of a Google profile in Chrome, or using a different Google account than usual, can make the checkup appear empty even though passwords are saved elsewhere.
🛡️ What About Safari
Safari itself does not include a separate, standalone password-checking tool with its own menu.
Instead, on Apple devices, Safari relies on the same underlying system that powers Apple Passwords, so the checkup described earlier for iPhone applies here too.
On an iPhone, checking Safari-saved passwords means following the same Apple Passwords steps already covered: opening Settings, tapping Passwords, authenticating, then reviewing Security Recommendations.
Any password Safari has offered to save or autofill lives in this same Apple Passwords system, so there is no separate Safari-only list to check.
On a Mac, the experience depends on which macOS version is installed.
| macOS Version | Where to Check |
|---|---|
| macOS Sequoia and later | Open the Passwords app, select Security, then review flagged accounts |
| Older macOS versions | Check under Safari > Settings > Passwords; the recommendation screen may look different |
On newer Macs with the dedicated Passwords app, the flow closely mirrors the iPhone version, including the same categories of weak, reused, and leaked passwords.
On older systems, the password management screen is still reachable through Safari settings, though the exact wording and location of security recommendations can vary by macOS release.
Because Apple updates these menus with new operating system versions, checking Apple’s official support documentation is a reasonable step if the screens do not match what is described above.
⚠️ What to Do When a Password Gets Flagged
Seeing a warning next to a saved password is not an emergency on its own, but it is a clear signal that something should change.
The first step is understanding which category the warning falls into, since weak, reused, and compromised passwords call for slightly different levels of urgency.
| Warning Type | What It Means | Suggested Action |
|---|---|---|
| Weak | Password is short, simple, or easy to guess | Replace with a longer, more complex password |
| Reused | Same password used on more than one account | Create a unique password for each account |
| Compromised or exposed | Password matches one found in a known data leak | Change it immediately, along with any other account using it |
A compromised or exposed warning generally deserves the fastest attention, since it means the exact password has already shown up somewhere outside the user’s control.
If that same password was reused anywhere else, every one of those accounts should get a new, unique password as well, not just the one the checker flagged first.
The actual password change happens on the service’s own website or app, not inside the Apple or Google checkup screen.
Tapping Change Password on Website in Apple Passwords, or following the prompt in Google Password Manager, usually opens the right page, but completing the update is a manual step.
After changing a flagged password, it is worth returning to the checkup tool later to confirm the warning has cleared, since the manager needs to recheck the newly saved password.
⚠️ Watch out: Never enter a password into a link from an email, text, or pop-up claiming to be a password checker; open the Passwords settings directly or type the service’s address in manually instead.
🔧 If the Checkup Tool Does Not Work or Shows Nothing
Sometimes the checkup screen appears empty, or it seems like it is not finding any saved passwords at all.
This usually comes down to one of a few common causes rather than an actual problem with the device.
- ✅ Confirm the relevant passwords are actually saved in that manager, not just typed manually each time
- ✅ Check that the correct Apple ID or Google account is signed in, especially on shared or work devices
- ✅ Update iOS, Android, macOS, or Chrome if menu names look unfamiliar or outdated
- ✅ Try the web-based route at passwords.google.com if the in-app Checkup does not load
A common mistake is assuming the checker reviews every password ever used, when it actually only reviews what has been saved into that specific manager.
Someone who always types a bank password manually, without letting the browser or phone save it, will not see that password show up in any checkup results.
Switching between personal and work Google accounts, or between a personal and a managed Apple ID, can also cause a checkup to look different than expected.
It is worth confirming which account is active before assuming the tool is broken or missing data.
If none of these steps resolve the issue, checking the official Apple or Google support pages, or contacting their support channels directly, is the most reliable way to get version-specific guidance.
🔒 Things to Watch Out For
A clean checkup result feels reassuring, but it does not guarantee an account is fully secure.
It only means the tool did not flag the specific passwords it was able to check, which is a narrower claim than it might first appear.
Accounts protected by a password saved somewhere the checker cannot see, such as a different password manager entirely, will not appear in these results either way.
Another point worth remembering is that these checkup tools identify problems but do not themselves change account passwords on outside services.
That final action always happens on the bank, email provider, or retailer’s own site or app, using whatever password-reset process that service offers.
Treat any unexpected password checkup email or link with suspicion, since scammers sometimes imitate official security notices to trick people into entering credentials on fake pages.
The safest approach is always opening the Settings app or typing a known address like passwords.google.com directly, rather than clicking a link from an unsolicited message.
Finally, using a unique password for every account remains the most direct way to limit the damage if one password does get exposed somewhere down the line.
🙋 Frequently Asked Questions
Q. Does Apple Passwords check passwords saved in Chrome too?
No. Apple Passwords only reviews passwords saved inside Apple’s own password manager, so Chrome-saved passwords would need to be checked separately through Google Password Manager.
Q. Is there a cost to use these built-in password checkers?
Both Apple Passwords and Google Password Manager checkups are included features on their respective platforms, with no separate purchase mentioned in either company’s documentation.
Q. How often should the checkup be run?
Neither Apple nor Google specifies a fixed schedule, but checking periodically, or after hearing about a major data breach, is a reasonable habit.
Q. Can the checkup tool change a password automatically?
No. The tool identifies the problem and may link to the service’s password-change page, but the actual update has to be completed on that service’s own site or app.
Q. What happens if the same Apple ID is used on an iPhone and a Mac?
Passwords saved under that Apple ID generally sync, so the Security Recommendations on iPhone and the Passwords app on a newer Mac should reflect similar results.
Q. Why does the Android settings path look different from the steps listed here?
Google notes that the exact menu path can vary by Android version and device manufacturer, so using the Chrome app route or visiting passwords.google.com directly tends to be more consistent.
Q. Does a weak password warning mean the account has already been hacked?
Not necessarily. A weak warning means the password could be easier to guess, while an exposed or compromised warning specifically means it matched a known data leak.
📌 Quick Summary
| Item | Details |
|---|---|
| iPhone tool | Settings > Passwords > Security Recommendations (or the Passwords app on iOS 18+) |
| Android tool | Chrome > Settings > Google Password Manager > Checkup |
| Computer tool | Chrome > Passwords and autofill > Google Password Manager > Checkup |
| Safari | No separate tool; uses Apple Passwords on iPhone, or the Mac Passwords app/Safari settings |
| Warning types | Weak, reused, and compromised or exposed |
| Who fixes the password | The user, on the affected service’s own website or app |
| Universal web option | passwords.google.com, select Go to Password Checkup |
A simple first step is opening the Passwords settings on whichever phone is in hand right now and seeing how many accounts show a warning.
This article is based on public information available at the time of writing. Menus and steps may change with app or device updates.