Google wants to make changing your compromised passwords easier

If you won't clean up your compromised passwords, then Google, like an exasperated parent, will have to do it for you.

During the tech behemoth's annual developer conference on Tuesday, Google I/O, the company announced a new (and for now limited) effort to help Chrome users change passwords that may have been exposed in a breach. This new feature complements Chrome's built-in password manager, and follows on the 2019 announcement that Chrome will warn users of potentially exposed passwords.

Essentially, using Duplex, Google is attempting to automate the sometimes time-consuming process of logging into a rarely used online account, navigating to the password-change menu, and going through the necessary steps.

"Chrome comes with a strong password manager built-in," Google said in a blog post. "It's been checking the safety of your passwords for a while now. And starting today, whenever Chrome detects a breach, it can also fix any compromised passwords quickly, and safely."

Changing it up. Credit: google

As people often reuse passwords (which they shouldn't do!), a compromised password on a random ticketing website, for example, might allow a hacker to gain access to a victim's bank account via an attack called credential stuffing.

Mashable Light Speed Want more out-of-this world tech, space and science stories? Sign up for Mashable's weekly Light Speed newsletter. By clicking Sign Me Up, you confirm you are 16+ and agree to our Terms of Use and Privacy Policy. Thanks for signing up!

Essentially, a hacker gets a list of password and email combinations from an ostensibly low-value target, like Dunkin' Donuts Perks accounts, and then tries every single one of those combinations on banking websites. Many of those Dunkin' customers likely use online banking — and at least of few of them might use the same passwords for both their Dunkin' and bank accounts.

Notably, Google's new feature only works with "supported sites" in the U.S. for now, and it's not clear which (or how many) sites are supported.

"The feature is rolling out on a small number of apps and websites, including Twitter, but will expand to additional sites/apps/countries in the future," a company spokesperson explained when asked for a list of supported sites.

SEE ALSO: Why you should lie in your password-recovery questions

Google says it intends to expand this service beyond the U.S. "in the coming months."

For Chrome users with hundreds of compromised passwords accumulating over the years, this automated process can't come soon enough.

Related Video: How to concoct (and remember!) an insanely secure password