Though Microsoft claimed that storing plaintext passwords in memory was by design, the company has changed the behavior to better protect your passwords.

This voice experience is generated by AI. Learn more. This voice experience is generated by AI. Learn more. Microsoft pulls u-turn on Edge password security issue. Microsoft has now confirmed that a ...

Forbes contributors publish independent expert analyses and insights. Davey Winder is a veteran cybersecurity writer, hacker and analyst. This voice experience is generated by AI. Learn more. This ...

UPDATE: May. 6, 2026, 9:40 AM EDT This piece was updated to include a statement from Microsoft. Password managers are supposed to make life easier for users by remembering their passwords and keeping ...

Microsoft Edge removes the Custom Primary Password for its built-in password manager. Edge now uses Windows Hello or OS/device authentication to protect saved passwords. Windows Hello biometrics can't ...

TL;DR: Microsoft will stop loading saved Edge passwords in plaintext memory starting with version 148, addressing a security flaw exposed by a researcher who showed all passwords were decrypted at ...

Microsoft Edge now requires Windows Hello authentication to access its password manager, replacing traditional master passwords with more secure passkey options.

An attacker with administrative privileges can gain access to Microsoft Edge user passwords even when they're not in use, because the browser stores them in cleartext in process memory as part of a ...

Add Yahoo as a preferred source to see more of our stories on Google. Microsoft pulls u-turn on Edge password security issue. SOPA Images/LightRocket via Getty Images Microsoft has now confirmed that ...