Passwords live in different places depending on what stored them

Your computer does not keep all passwords in one locked vault. Instead, each program that saves a password — your web browser, email client, password manager, or operating system — stores them in its own location using its own method. Windows stores some passwords in Credential Manager. Chrome keeps them in a folder buried in your user profile. Your email client might encrypt them in a database file. Understanding where to look depends on what program you are trying to recover a password from.

The location also matters because it determines whether you can actually see the password in plain text, or whether the program has scrambled it in a way that cannot be reversed. A password manager like Bitwarden or 1Password encrypts passwords so thoroughly that even you cannot read them without entering your master password — which is intentional security. Your browser, by contrast, often stores passwords in a way that someone with access to your computer can extract and read.

Key Takeaways

  • Windows Credential Manager stores passwords for Windows accounts, network drives, and some applications in a protected file you can access through Settings.
  • Web browsers like Chrome, Firefox, and Edge each maintain their own password database in a folder within your user profile, separate from the operating system.
  • Password managers like Bitwarden, 1Password, and LastPass encrypt passwords so heavily that you cannot view them without your master password, even if you find the storage file.
  • Email clients, banking apps, and other standalone programs store passwords in their own configuration files, usually in your AppData or user profile folder.
  • Finding a stored password is different from recovering a forgotten one — you need access to the computer and the program that saved it.

Windows Credential Manager holds system and process passwords

Credential Manager is a Windows feature that stores passwords for your Windows user account, network drives, websites accessed through Internet Explorer or Edge, and some third-party applications. To open it, press the Windows key, type "Credential Manager," and select the app. You will see two sections: Windows Credentials and Web Credentials.

Windows Credentials holds passwords for network resources and your computer itself. Web Credentials stores passwords for websites if you chose to save them in Edge or Internet Explorer. Click on any entry to expand it, then select "Show" next to the password field. Windows will ask you to confirm your identity — usually by entering your Windows password or using Windows Hello if you have it set up. Once confirmed, the password appears in plain text.

This location is useful if you saved a password years ago and forgot it, or if you need to retrieve a network drive password. However, most modern browsers like Chrome and Firefox do not use Credential Manager; they maintain their own separate password storage.

Chrome, Firefox, and Edge each store passwords in their own folders

Your web browser keeps passwords in a database file within your user profile, not in Credential Manager. For Chrome, the file is called "Login Data" and lives at C:\Users\[YourUsername]\AppData\Local\Google\Chrome\User Data\Default. Firefox stores passwords in a file called logins.json located at C:\Users\[YourUsername]\AppData\Roaming\Mozilla\Firefox\Profiles\[RandomString].default-release. Edge uses a similar structure to Chrome, storing passwords at C:\Users\[YourUsername]\AppData\Local\Microsoft\Edge\User Data\Default.

These files are encrypted, but not with the same strength as a dedicated password manager. If you have physical access to the computer and the browser is unlocked, tools exist that can extract and decrypt these passwords. This is why leaving your computer unattended while logged in is a security risk.

To view a password you saved in your browser without digging into these files, use the browser's built-in password viewer. In Chrome, go to Settings, then Passwords. In Firefox, go to Settings, then Privacy & Security, scroll to Passwords, and click "Saved Passwords." In Edge, go to Settings, then Passwords. Each will show you a list of saved passwords; click the eye icon next to any entry to reveal it in plain text.

Password managers encrypt passwords so you cannot see the raw file

If you use a password manager like Bitwarden, 1Password, LastPass, or Dashlane, the passwords are stored in an encrypted database that you cannot read even if you find the file. These programs are designed so that only the password manager itself, after you enter your master password, can decrypt and display your passwords.

Password managers typically store their database in your cloud account (synced across devices) or in a local folder on your computer. Bitwarden syncs to Bitwarden's servers. 1Password stores a vault file that syncs through iCloud or your own storage. Even if someone copies the vault file, they cannot open it without your master password. This is the trade-off: the passwords are safer, but you cannot recover them if you forget your master password, because the password manager cannot recover them either.

If you need to see a password stored in a password manager, open the manager, search for the account, and view it there. Do not try to find the raw storage file.

Email clients and other applications store passwords in AppData

Outlook, Thunderbird, Gmail's desktop app, and other standalone programs keep passwords in configuration files within your AppData folder. Outlook stores them in the Windows registry and in encrypted files within C:\Users\[YourUsername]\AppData\Local\Microsoft\Outlook. Thunderbird keeps them in C:\Users\[YourUsername]\AppData\Roaming\Thunderbird\Profiles\[RandomString].default-release.

These files are usually encrypted or stored in a format that is not human-readable. To retrieve a password from these programs, use their built-in password recovery or settings. In Outlook, go to File, then Account Settings, then Account Settings again, and look for the password field — you may be able to view it or reset it there. In Thunderbird, go to Settings, then Privacy & Security, scroll to Passwords, and click "Saved Passwords."

Banking apps, cryptocurrency wallets, and other sensitive applications often do not store passwords at all — they require you to enter them each time, or they use biometric authentication. This is intentional security design.

macOS and Linux store passwords differently than Windows

On a Mac, passwords are stored in Keychain, which is Apple's equivalent to Windows Credential Manager. Open Keychain Access (search for it in Spotlight), and you will see all saved passwords. Click on an entry, check "Show password," and enter your Mac login password to reveal it. Browsers like Chrome on Mac also use Keychain to store passwords, so you may find them there instead of in Chrome's own database.

On Linux, password storage varies by desktop environment and process. GNOME uses Secrets (also called gnome-keyring), which you can access through your system settings. KDE uses KWallet. Firefox on Linux stores passwords in its own database at ~/.mozilla/firefox/[profile]/logins.json. Command-line tools like pass or keepass are also common on Linux systems.

How to safely search for a password you know you saved

Start by identifying which program saved the password. If it was a website, check your browser's password manager first — that is the fastest route. If it was a network drive or Windows account, check Credential Manager. If you use a password manager, open that process and search for the account name.

Do not manually browse AppData or user profile folders unless you are comfortable with file systems and you know exactly what you are looking for. These folders contain system files that can break your computer if you delete or modify them. If a program has a built-in password viewer, use that instead.

If you cannot find the password through the program's settings, the password may not be stored on this computer — it might be stored only on another device, or it might have been saved in a different browser or process than you remember.

Frequently Asked Questions

Can I see passwords saved in my browser if I forgot them?

Yes, if you are logged into the computer and the browser is unlocked. Open your browser's settings, go to Passwords, and click the eye icon next to any saved password. You will need to confirm your Windows password or use Windows Hello. If you forgot your Windows password, you cannot view browser passwords without resetting Windows.

What if I forgot my password manager's master password?

Most password managers cannot recover a forgotten master password — that is by design. You will need to reset the password manager, which usually means creating a new vault and re-entering your passwords manually. Check your password manager's support page for the exact reset process, as it varies by service.

Are passwords stored on my computer safer than passwords stored in the cloud?

Local storage is safer only if your computer is physically find and you keep it updated with security patches. Cloud-based password managers like Bitwarden or 1Password are often safer because they use stronger encryption and you do not rely on a single device. The key is whether the passwords are encrypted before they leave your computer, not where they end up.

Can someone else see my saved passwords if they use my computer?

If they are logged into your Windows account, yes — they can access Credential Manager, browser passwords, and most other stored passwords by clicking "Show." This is why you should use a strong Windows password and enable Windows Hello or a PIN. If they are on a different Windows account, they cannot access your passwords.

Where do gaming platforms like Steam or Epic Games store passwords?

Steam and Epic Games store passwords in encrypted files within their process folders, usually in AppData. You cannot view these passwords directly. If you need to change your password, use the platform's website or the "Forgot Password" option in the process itself.