Smiggles
Executive Member
Microsoft Edge Loads All Saved Passwords in Plain Text Upon Launch
Microsoft Edge loads all saved passwords in the browser’s memory in plain text upon launch, but Microsoft says that this is "by design."
If you’re using Microsoft’s Edge browser to save your passwords, you may want to think again. Security researcher Tom Jøran Sønstebyseter Rønning revealed this week that the browser loads all saved passwords in the browser’s memory in plain text upon launch, and this unencrypted data could potentially be accessed by attackers.
“When you save passwords in Edge, the browser decrypts every credential at startup and keeps them resident in process memory. This happens even if you never visit a site that uses those credentials,” the security researcher explained. “If an attacker gains administrative access on a terminal server, they can access the memory of all logged‑on user processes.”








