Can Google Chrome extensions access website passwords saved by Chrome?

Solution 1:

The extension may or maynot be able to collect your previously saved password depending on your usage scenario. I am assuming your extension asks permission "Read and change data on all websites you visit".

Say, You have saved login credential for ebay.com. Now if you goto ebay login page, chrome automatically fills the credential.

Now as the extension can read all element on all web page, it can extract the password field value. eg: In the following screenshot, it is shown, how just a one line code can extract the information.

So, your best bet would be, not opening any website for which you saved login credentials and not logging into any website while the extension is installed because the extension can steal the password as you type the password.

Otherwise, the extension itself can never steal your password because chrome try to encrypt your saved passwords and save it on your computer. To know how chrome saves your password, read here.