Skip to content
Tech News
← Back to articles

Why Edge stores your passwords in plaintext, according to Microsoft

read original get Microsoft Edge Password Manager → more articles
Why This Matters

Microsoft Edge stores user passwords in plaintext within RAM when managing passwords, a behavior Microsoft considers an intentional feature rather than a security flaw. While this may raise concerns about password security, Microsoft states that the risk is minimal unless the device is already compromised. This highlights ongoing challenges in balancing usability, performance, and security in browser design for consumers and the industry alike.

Key Takeaways

Lance Whitney/ZDNET

Follow ZDNET: Add us as a preferred source on Google.

ZDNET's key takeaways

Microsoft Edge stores your passwords in plaintext in RAM.

This behavior occurs if you use Edge as your password manager.

Microsoft says that this behavior is a feature, not a bug.

Do you use Microsoft Edge to save and manage your website passwords? If so, a new finding raises questions about the safety and security of your stored passwords.

A security researcher found that Edge stores your plaintext passwords in memory when you use the browser to manage them. In a social media post, researcher Tom Jøran Sønstebyseter Rønning explained how the process works and posted a video showing it in action.

Also: Trojan abuses Microsoft Phone Link app to steal your passwords

... continue reading