I recently installed Firefox and realised that it was able to successfully import all passwords that were stored in Chrome.
I had been using a sync passphrase in Chrome and I expect it to store the password in such a way that they cannot be read by any other software installed in the PC. At least this is what's told by the Google Chrome community. After all, Firefox being just another software installed in the same PC, if it can read my passwords, then any other software can do the same.
However, when I try to view a password using Google Chrome, it expects me to type the Windows password. Is it giving me some false security? Giving me the impression that passwords are encrypted?
How was Firefox able to read the so called "encrypted" passwords from my Chrome and store them in its database?
Is this a bug in Chrome?
I used Google Chrome latest today in a Windows 10 PC fully updated PC.
I expect it to store the password in such a way that they cannot be read by any other software installed in the PC
Impossible. One non-admin userspace program running as user A can't ever hide data from another non-admin userspace program running as user A.