Is cromite safe from password and cookie stealers?

[Flesei]

are the passwords encrypted? does cromite save passwords&cookies in similar directories as other common chromium browsers?
if not what can i do to make them safe?

[uazo]

are you talking about android?

[Flesei]

windows

[uazo]

First of all, cromite does not differ in behavior from chromium.
In windows, cookies and passwords are encrypted using DPAPI, but are readable by all applications that can access the user registry and if the user opens the “Windows Hello” lockbox. chromium is working on a new feature that includes an additional encryption key for each application, so that passwords and cookies can be decrypted only by the application that originated them.

if not what can i do to make them safe?

it is possible to make passwords more secure by using external software such as keepassdx, while for cookies my advice is to turn on automatic deletion when closing, because, when cromite is open, the cookie database is locked to exclusive read/write and therefore no application can access it.

[uazo]

other things came to mind.

In chromium they are trying what they call ‘session bound cookies’, i.e. binding cookies not only to the schema and domain, but also to the port. Currently this feature is used for chromium's integrated login with gaia. In cromite it is currently disabled because it is not yet clear to me whether it can be exploited as a tracking vehicle.
in addition, currently in cromite, extensions cannot access navigation cookies, whereas in chromium they of course can use and modify them.