Microsoft Edge keeps all saved passwords unencrypted in memory whenever it's open

If you save passwords in Microsoft Edge, there’s a security risk you should know about. According to a new disclosure, whenever you open Edge, the browser immediately loads all saved passwords into memory in readable form (not just the password for the website you’re logging into). That means credentials for every account saved in Edge could be exposed if malware, a compromised admin account, or an attacker gains access to your device or user session.

The finding was disclosed by security researcher Tom Jøran Sønstebyseter Rønning.

Read the full article below in Proton’s blog.

Source: https://proton.me/business/blog/microsoft-edge-passwords-exposed

My advice would be to stop letting any browser store your passwords. Instead use a proper password manager such as 1Password, Bitwarden or ProtonPass (and two out the three of those even have a free plan, so it doesn’t have to cost you anything).

Edge is just too risky for password management with this flaw / vulnerability.

Chris #TheAntiVirusGuy