It’s been reported that if you have Google’s Enhanced Spellcheck enabled, it could be sending everything you type to Google’s servers, including passwords. Here’s how to stop that from happening:

- To check if you have enabled Google’s ‘Enhanced spell check’ copy and paste chrome://settings/?search=Enhanced+Spell+Check into the Chrome address bar (the omnibox).

- If ‘Basic spell check’ is selected, this is OK because it checks spelling without sending data to Google’s servers.

- If ‘Enhanced spell check’ is selected, unselect it and select ‘Basic spell check’ instead.

- For no spell checking at all, turn off the top-right slider.