diff --git a/chrome/browser/password_manager/chrome_password_manager_client.cc b/chrome/browser/password_manager/chrome_password_manager_client.cc
index e545d78ee74b2..1928a1cf77b53 100644
--- a/chrome/browser/password_manager/chrome_password_manager_client.cc
+++ b/chrome/browser/password_manager/chrome_password_manager_client.cc
@@ -1589,6 +1589,11 @@ void ChromePasswordManagerClient::PresaveGeneratedPassword(
   if (!password_manager::bad_message::CheckFrameNotPrerendering(rfh)) {
     return;
   }
+  if (!password_manager::bad_message::CheckChildProcessSecurityPolicyForURL(
+          rfh, password_manager::GetURLFromRenderFrameHost(rfh),
+          BadMessageReason::CPMD_BAD_ORIGIN_PRESAVE_GENERATED_PASSWORD)) {
+    return;
+  }
 
   PasswordManagerDriver* driver =
       password_manager::ContentPasswordManagerDriver::GetForRenderFrameHost(
@@ -1618,6 +1623,11 @@ void ChromePasswordManagerClient::PasswordNoLongerGenerated(
   if (!password_manager::bad_message::CheckFrameNotPrerendering(rfh)) {
     return;
   }
+  if (!password_manager::bad_message::CheckChildProcessSecurityPolicyForURL(
+          rfh, password_manager::GetURLFromRenderFrameHost(rfh),
+          BadMessageReason::CPMD_BAD_ORIGIN_PASSWORD_NO_LONGER_GENERATED)) {
+    return;
+  }
   PasswordManagerDriver* driver =
       password_manager::ContentPasswordManagerDriver::GetForRenderFrameHost(
           rfh);