And not just logged in. The user also has to have browser sync for passwords enabled.
edit: i only use[d] to use Chrome for development, I have an iPhone (all my browsing is done via Safari) so there's no need for me enable browser sync (at least i never explicitly enabled it).