# I'm already automatically logged into my Gmail account, but how do I find out what my password is, for future reference?

**URL:** <https://boards.straightdope.com/t/im-already-automatically-logged-into-my-gmail-account-but-how-do-i-find-out-what-my-password-is-for-future-reference/943572>\
**Category:** Factual Questions\
**Created:** [June 3, 2021, 11:09pm UTC](https://boards.straightdope.com/t/im-already-automatically-logged-into-my-gmail-account-but-how-do-i-find-out-what-my-password-is-for-future-reference/943572 "2021-06-03T23:09:00Z")\
**Posts on this page:** 20\
**Page:** 2

<div class="post-metadata">

**Author:** ![pulykamell](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/pulykamell/32/3166_2.png) [@pulykamell](https://boards.straightdope.com/u/pulykamell)\
**Post date:** [June 3, 2021, 11:44pm UTC](https://boards.straightdope.com/t/im-already-automatically-logged-into-my-gmail-account-but-how-do-i-find-out-what-my-password-is-for-future-reference/943572/21 "2021-06-03T23:44:42Z")

</div>

> [@kenobi\_65](#):
>
> or can see your posts on Facebook

That is assuming you post on Facebook but, yeah, every time I see those “your porn name is your middle name and street you grew up on” types of questions, I just shake my head at the people answering them.

---

<div class="post-metadata">

**Author:** ![kenobi\_65](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/kenobi_65/32/13178_2.png) [@kenobi\_65](https://boards.straightdope.com/u/kenobi_65)\
**Post date:** [June 3, 2021, 11:46pm UTC](https://boards.straightdope.com/t/im-already-automatically-logged-into-my-gmail-account-but-how-do-i-find-out-what-my-password-is-for-future-reference/943572/22 "2021-06-03T23:46:11Z")

</div>

> [@pulykamell](#):
>
> That is assuming you post on Facebook

Indeed – not everyone does, but Facebook usage is prevalent enough, and participation in those phishing attempts is prevalent enough, that the industry is increasingly seeing security questions as not secure enough.

And, if you (the hypothetical you) are on Facebook, even if you don’t participate in answering those memes, you may have shared enough information about yourself and your family that many common security questions could still be compromised.

---

<div class="post-metadata">

**Author:** ![Something](https://avatars.discourse-cdn.com/v4/letter/s/a8b319/32.png) [@Something](https://boards.straightdope.com/u/Something)\
**Post date:** [June 3, 2021, 11:47pm UTC](https://boards.straightdope.com/t/im-already-automatically-logged-into-my-gmail-account-but-how-do-i-find-out-what-my-password-is-for-future-reference/943572/23 "2021-06-03T23:47:52Z")

</div>

> [@kenobi\_65](#):
>
> People will, with surprising frequency, forget their answers to their security questions, especially if there are a limited number offered

But for those who don’t forget the answers, it’s a Plan B or C, and for those who do forget the answers, it’s a “Not Required To Answer If You Can Remember Your Password” Thing, so they haven’t lost anything by having security questions as part of the possible logins.

> [@kenobi\_65](#):
>
> As @pulykamell notes, they’re often very easy for a determined hacker to figure out, or even just someone who knows you well, or can see your posts on Facebook

A hacker could use a program that could guess the name of my first pet and where my parents got married? If so, s/he is using one of those “program puts in every combination of letters and numbers until answer found”, and the systems never allow that many guesses of security questions.

> [@kenobi\_65](#):
>
> Related to the above, a very common Facebook meme is to ask people to share things like the make of their first car, the name of their first pet, their favorite movie, etc. – many of which happen to also be common security questions

Please tell me you’ve seen Now You See Me (the first one), so you can laugh at what happens in that movie related to this trick 🙂 .

> [@kenobi\_65](#):
>
> Generally speaking, a lot of companies are moving towards two-factor authentication (2FA) or multi-factor authentication (MFA) – those usually entail sending a code number to your cell phone or email, which you then use to “prove it’s you.” And, some are also now using biometrics (thumbprint, facial recognition, etc.)

Yeah, which is great, except Gmail can’t send me an email because it is my email, and it never offered me putting in a separate email account for such purposes, and it never offered me putting in my cell number.

---

<div class="post-metadata">

**Author:** ![Riemann](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/riemann/32/3133_2.png) [@Riemann](https://boards.straightdope.com/u/Riemann)\
**Post date:** [June 3, 2021, 11:48pm UTC](https://boards.straightdope.com/t/im-already-automatically-logged-into-my-gmail-account-but-how-do-i-find-out-what-my-password-is-for-future-reference/943572/24 "2021-06-03T23:48:00Z")

</div>

> [@iamthewalrus\_3](#):
>
> There is no way. Your gmail password is not stored in plaintext anywhere on google’s systems, so there is no way for you to view it. This is by design.
> 
> It’s _maybe_ possible that you can change it to a known new password, but I’m betting that you can’t do that either without knowing the current password. This is also by design, to keep someone from locking you out of your account if you step away for a moment from a logged in device.

Agreed, and this makes sense for the reasons stated.

In which case…

> [@kenobi\_65](#):
>
> Make sure, in your Google account settings, that you’ve set up an alternate way for them to get in touch with you (a different email address, or a cell phone for a text). Once you’ve confirmed that, then log out, and hit “I forgot my password” (or something similar) to reset it to something you’ll remember.

If _this_ is possible without knowing your password, doesn’t it defeat the purpose of what @iamthewalrus_3 pointed out?

---

<div class="post-metadata">

**Author:** ![Something](https://avatars.discourse-cdn.com/v4/letter/s/a8b319/32.png) [@Something](https://boards.straightdope.com/u/Something)\
**Post date:** [June 3, 2021, 11:50pm UTC](https://boards.straightdope.com/t/im-already-automatically-logged-into-my-gmail-account-but-how-do-i-find-out-what-my-password-is-for-future-reference/943572/25 "2021-06-03T23:50:44Z")

</div>

> [@WildaBeast](#):
>
> Either that, or the answers really aren’t that easy to remember, or might change in the future. My favorite movie might be one thing today, but five years from now when I need to reset my password I might have a new favorite movie. And then I have to try to remember how long ago I set up that account, and what I might have said my favorite movie was

And that’s why, with security questions, you only have to get a certain number of them right to do the trick (if they ask 10 questions, you only have to get like 7 or 8 right usually, correct?)

---

<div class="post-metadata">

**Author:** ![kenobi\_65](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/kenobi_65/32/13178_2.png) [@kenobi\_65](https://boards.straightdope.com/u/kenobi_65)\
**Post date:** [June 3, 2021, 11:54pm UTC](https://boards.straightdope.com/t/im-already-automatically-logged-into-my-gmail-account-but-how-do-i-find-out-what-my-password-is-for-future-reference/943572/26 "2021-06-03T23:54:17Z")

</div>

> [@Something](#):
>
> But for those who don’t forget the answers, it’s a Plan B or C, and for those who do forget the answers, it’s a “Not Required To Answer If You Can Remember Your Password” Thing, so they haven’t lost anything by having security questions as part of the possible logins.

Except that security questions are most frequently used as a verification method for people who cannot remember their passwords in the first place, and they’re asked to answer those security questions when they request a password reset.

---

<div class="post-metadata">

**Author:** ![kenobi\_65](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/kenobi_65/32/13178_2.png) [@kenobi\_65](https://boards.straightdope.com/u/kenobi_65)\
**Post date:** [June 3, 2021, 11:55pm UTC](https://boards.straightdope.com/t/im-already-automatically-logged-into-my-gmail-account-but-how-do-i-find-out-what-my-password-is-for-future-reference/943572/27 "2021-06-03T23:55:09Z")

</div>

> [@Riemann](#):
>
> If _this_ is possible without knowing your password, doesn’t it defeat the purpose of what @iamthewalrus_3 pointed out?

When I go on my Google settings, the password is already in there, because I’m signed into Google on my browser (which I assume the OP is, as well); I’m not asked to re-enter it.

---

<div class="post-metadata">

**Author:** ![Bootb](https://avatars.discourse-cdn.com/v4/letter/b/e19b73/32.png) [@Bootb](https://boards.straightdope.com/u/Bootb)\
**Post date:** [June 3, 2021, 11:58pm UTC](https://boards.straightdope.com/t/im-already-automatically-logged-into-my-gmail-account-but-how-do-i-find-out-what-my-password-is-for-future-reference/943572/28 "2021-06-03T23:58:57Z")

</div>

> [@Something](#):
>
> Yeah, which is great, except Gmail can’t send me an email because it is my email, and it never offered me putting in a separate email account for such purposes, and it never offered me putting in my cell number.

You may be able to add a phone number or back-up email to your password recovery options.

---

<div class="post-metadata">

**Author:** ![kenobi\_65](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/kenobi_65/32/13178_2.png) [@kenobi\_65](https://boards.straightdope.com/u/kenobi_65)\
**Post date:** [June 4, 2021, 12:00am UTC](https://boards.straightdope.com/t/im-already-automatically-logged-into-my-gmail-account-but-how-do-i-find-out-what-my-password-is-for-future-reference/943572/29 "2021-06-04T00:00:36Z")

</div>

> [@Bootb](#):
>
> You may be able to add a phone number or back-up email to your password recovery options.

For that matter, there’s no reason why the OP couldn’t create a second Google account (and, thus, a second Gmail address), with a password which he will remember, as that back-up email for password recovery. I have two – one for my personal stuff, one for work.

---

<div class="post-metadata">

**Author:** ![Something](https://avatars.discourse-cdn.com/v4/letter/s/a8b319/32.png) [@Something](https://boards.straightdope.com/u/Something)\
**Post date:** [June 4, 2021, 12:01am UTC](https://boards.straightdope.com/t/im-already-automatically-logged-into-my-gmail-account-but-how-do-i-find-out-what-my-password-is-for-future-reference/943572/30 "2021-06-04T00:01:34Z")

</div>

> [@kenobi\_65](#):
>
> Except that security questions are most frequently used as a verification method for people who cannot remember their passwords in the first place, and they’re asked to answer those security questions when they request a password reset

But if there were no security questions in that situation, wouldn’t they already be out of options anyway?

What I’m trying to express is: aren’t security questions always a “helps if you know the answers, doesn’t hurt if you don’t because you would’ve been out of options anyway” kinda thing?

---

<div class="post-metadata">

**Author:** ![pulykamell](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/pulykamell/32/3166_2.png) [@pulykamell](https://boards.straightdope.com/u/pulykamell)\
**Post date:** [June 4, 2021, 12:03am UTC](https://boards.straightdope.com/t/im-already-automatically-logged-into-my-gmail-account-but-how-do-i-find-out-what-my-password-is-for-future-reference/943572/31 "2021-06-04T00:03:21Z")

</div>

> [@Something](#):
>
> A hacker could use a program that could guess the name of my first pet and where my parents got married? If so, s/he is using one of those “program puts in every combination of letters and numbers until answer found”, and the systems never allow that many guesses of security questions.

Depends on a few factors. If it’s a reasonably uncommon pet name and where your parents got married is the name of a specific hall or whatnot, and not just the city, then it may be difficult enough. If it’s just a city, a clever enough person who wants access to your account specifically can probably figure it out. Pet name might take some research (if you’ve ever posted it before), or trial-and-error (if it’s a common name, but you’ll usually get locked out after 3 or 5 mistakes, so probably not the best approach.) A better approach would be some sort of social engineering for you to volunteer that info.

So perhaps not all that likely, but possible if someone really is determined.

---

<div class="post-metadata">

**Author:** ![kenobi\_65](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/kenobi_65/32/13178_2.png) [@kenobi\_65](https://boards.straightdope.com/u/kenobi_65)\
**Post date:** [June 4, 2021, 12:06am UTC](https://boards.straightdope.com/t/im-already-automatically-logged-into-my-gmail-account-but-how-do-i-find-out-what-my-password-is-for-future-reference/943572/32 "2021-06-04T00:06:06Z")

</div>

> [@Something](#):
>
> But if there were no security questions in that situation, wouldn’t they already be out of options anyway?

If a company doesn’t use security questions for password resets, they use some other method, like the ones that we’ve already discussed (2FA, email to another email address, etc.), as Google does.

> [@](#):
>
> What I’m trying to express is: aren’t security questions always a “helps if you know the answers, doesn’t hurt if you don’t because you would’ve been out of options anyway” kinda thing?

No, because, as Pulykamell and I have already noted, in addition to often being just as hard to remember as the original password, they are notoriously insecure and prone to being inadvertently revealed through phishing or social engineering (the Facebook memes).

---

<div class="post-metadata">

**Author:** ![Railer13](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/railer13/32/9742_2.png) [@Railer13](https://boards.straightdope.com/u/Railer13)\
**Post date:** [June 4, 2021, 12:10am UTC](https://boards.straightdope.com/t/im-already-automatically-logged-into-my-gmail-account-but-how-do-i-find-out-what-my-password-is-for-future-reference/943572/33 "2021-06-04T00:10:43Z")

</div>

> [@Something](#):
>
> My pc is already automatically logged into my gmail account

> [@BigT](#):
>
> If you have saved your password with your browser, there will be a way. But we’d need to know which web browser you use.

Have you answered @BigT’s question? You originally said that your PC is automatically logged into your gmail account, but I don’t think you’ve told us what email client you use. We’re assuming it’s a browser like Chrome or Firefox, can you verify?

> [@Richard\_Pearse](#):
>
> I’m asked for my computer’s admin password

I don’t know how Firefox works, but if you’re using Chrome and want to see your stored passwords, you need to know the admin password for Windows. Do you remember that password?

---

<div class="post-metadata">

**Author:** ![Something](https://avatars.discourse-cdn.com/v4/letter/s/a8b319/32.png) [@Something](https://boards.straightdope.com/u/Something)\
**Post date:** [June 4, 2021, 12:12am UTC](https://boards.straightdope.com/t/im-already-automatically-logged-into-my-gmail-account-but-how-do-i-find-out-what-my-password-is-for-future-reference/943572/34 "2021-06-04T00:12:33Z")

</div>

> [@kenobi\_65](#):
>
> If a company doesn’t use security questions for password resets, they use some other method, like the ones that we’ve already discussed (2FA, email to another email address, etc.), as Google does.

I don’t want to sound like the spokesperson for Security Questions, so I’m gonna stop proclaiming my affection for them pretty soon 😃 , but…

If a company doesn’t offer 2FA, email to another email address, etc. as options, and they _do_ offer Sec Qs, can you say that they _don’t_ offer the other options as a result of the fact that they _do_ offer the Sec Qs? What I mean is, are there any companies that say “Let’s offer Sec Qs as an option, and because we offered that option, let’s _not_ offer 2FA or email to another address as options, since there’s surely no need?” Is it a “Lifeboat is full, let’s not put another thing in there” situation, where, in a world where Sec Qs don’t exist, they _would_ have offered more than that as a way in?

---

<div class="post-metadata">

**Author:** ![WildaBeast](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/wildabeast/32/6_2.png) [@WildaBeast](https://boards.straightdope.com/u/WildaBeast)\
**Post date:** [June 4, 2021, 12:12am UTC](https://boards.straightdope.com/t/im-already-automatically-logged-into-my-gmail-account-but-how-do-i-find-out-what-my-password-is-for-future-reference/943572/35 "2021-06-04T00:12:47Z")

</div>

> [@Something](#):
>
> A hacker could use a program that could guess the name of my first pet and where my parents got married? If so, s/he is using one of those “program puts in every combination of letters and numbers until answer found”, and the systems never allow that many guesses of security questions.

No, a hacker just has to share a meme on Facebook that tricks you into revealing that information.

---

<div class="post-metadata">

**Author:** ![Something](https://avatars.discourse-cdn.com/v4/letter/s/a8b319/32.png) [@Something](https://boards.straightdope.com/u/Something)\
**Post date:** [June 4, 2021, 12:15am UTC](https://boards.straightdope.com/t/im-already-automatically-logged-into-my-gmail-account-but-how-do-i-find-out-what-my-password-is-for-future-reference/943572/36 "2021-06-04T00:15:00Z")

</div>

> [@WildaBeast](#):
>
> No, a hacker just has to share a meme on Facebook that tricks you into revealing that information

Just like I said to kenobi above, I hope you’ve seen _Now You See Me_ so you can laugh at what they did related to that in one part of the movie 😆 .

---

<div class="post-metadata">

**Author:** ![Riemann](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/riemann/32/3133_2.png) [@Riemann](https://boards.straightdope.com/u/Riemann)\
**Post date:** [June 4, 2021, 12:17am UTC](https://boards.straightdope.com/t/im-already-automatically-logged-into-my-gmail-account-but-how-do-i-find-out-what-my-password-is-for-future-reference/943572/37 "2021-06-04T00:17:18Z")

</div>

> [@kenobi\_65](#):
>
> When I go on my Google settings, the password is already in there, because I’m signed into Google on my browser (which I assume the OP is, as well); I’m not asked to re-enter it.

My point is - even if logged in, you cannot change your password without knowing your old password, for the security reasons described: someone who comes across your machine unattended but logged in could change the password, lock you out and take over the account.

It makes little sense, then, to allow you to change the security settings under similar circumstances, since that would indirectly allow someone to do exactly the same thing. They could change the backup security phone number to their own phone number, etc.

If you’ve tried it and you _can_ do it, I’m not disputing your discovery - I’m just trying to understand the logic of it.

---

<div class="post-metadata">

**Author:** ![kenobi\_65](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/kenobi_65/32/13178_2.png) [@kenobi\_65](https://boards.straightdope.com/u/kenobi_65)\
**Post date:** [June 4, 2021, 12:19am UTC](https://boards.straightdope.com/t/im-already-automatically-logged-into-my-gmail-account-but-how-do-i-find-out-what-my-password-is-for-future-reference/943572/38 "2021-06-04T00:19:25Z")

</div>

> [@Something](#):
>
> If a company doesn’t offer 2FA, email to another email address, etc. as options, and they _do_ offer Sec Qs, can you say that they _don’t_ offer the other options as a result of the fact that they _do_ offer the Sec Qs? What I mean is, are there any companies that say “Let’s offer Sec Qs as an option, and because we offered that option, let’s _not_ offer 2FA or email to another address as options, since there’s surely no need?” Is it a “Lifeboat is full, let’s not put another thing in there” situation, where, in a world where Sec Qs don’t exist, they _would_ have offered more than that as a way in?

I don’t think that there are too many companies which are _only_ using security questions for identity verification anymore, though I would not be surprised to learn that it’s more common than I think. That said, if a company is still _only_ using security questions, it’s likely a matter of them being some combination of lazy/cheap/complacent, and having not updated their security protocols for years.

Best practices for identity security have moved on from security questions. Bear in mind, it’s not just a matter of providing something that’s easy to use for their customers, but also using a method(s) which are reasonably secure, to protect the company from risks associated with identity fraud.

---

<div class="post-metadata">

**Author:** ![Spiderman](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/spiderman/32/230_2.png) [@Spiderman](https://boards.straightdope.com/u/Spiderman)\
**Post date:** [June 4, 2021, 12:27am UTC](https://boards.straightdope.com/t/im-already-automatically-logged-into-my-gmail-account-but-how-do-i-find-out-what-my-password-is-for-future-reference/943572/39 "2021-06-04T00:27:40Z")

</div>

> [@pulykamell](#):
>
> They usually have very easy questions that – if you answer honestly – somebody who knows you reasonably well can figure out. One way around it is to just have fake answers that you remember to them.

Make all your answers either “Fuck you” or “I can’t tell you that” - makes for great fun on the phone (remember when you actually had to _call_ customer service?) & they ask you for or the answers to your security questions. 🤣

---

<div class="post-metadata">

**Author:** ![Kimera757](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/kimera757/32/3765_2.png) [@Kimera757](https://boards.straightdope.com/u/Kimera757)\
**Post date:** [June 4, 2021, 12:27am UTC](https://boards.straightdope.com/t/im-already-automatically-logged-into-my-gmail-account-but-how-do-i-find-out-what-my-password-is-for-future-reference/943572/40 "2021-06-04T00:27:56Z")

</div>

> [@Something](#):
>
> My pc is already automatically logged into my gmail account, but I don’t remember my password, so I need to find out what it is for future reference. Repeat: I’m already IN my account, but for future reference I need to know what my password is that I selected but can’t remember every character of (close is never close enough with passwords).
> 
> Where in my gmail account can I click on to see my password posted? Or is there no way?
> 
> Repeat: I already am in my gmail account, looking at emails and what not, but I need to know my password in case I ever get logged out.

Answering late. Your browser remembers your Google password (same password for Gmail, Google Photos, etc). Look up how to see saved passwords in your browser. Then get a password generator which, among other things, stores passwords securely. (I effectively need to memorize one password.)

I am making an assumption here, that you are using a desktop or laptop to access Gmail. I don’t know how you could get that from your phone.

[Previous page](https://boards.straightdope.com/t/im-already-automatically-logged-into-my-gmail-account-but-how-do-i-find-out-what-my-password-is-for-future-reference/943572.md?page=1)

[Next page](https://boards.straightdope.com/t/im-already-automatically-logged-into-my-gmail-account-but-how-do-i-find-out-what-my-password-is-for-future-reference/943572.md?page=3)
