Skip to main content
See every side of every news story
Published loading...Updated

Microsoft Says Edge Password Security Vulnerability Is ‘By Design’—Is It Time To Switch To Chrome?

Microsoft says the design speeds sign-ins, but researchers warn it leaves saved credentials exposed in memory to anyone with admin access.

  • Security researcher Tom Jøran Sønstebyseter Rønning discovered on Monday that Microsoft Edge loads all saved passwords into RAM in cleartext at startup, creating a potential security vulnerability.
  • Unlike Google Chrome, which decrypts credentials only when needed, Edge keeps all passwords resident in process memory throughout the session. Rønning warned that Edge is the only Chromium-based browser he tested exhibiting this behavior.
  • Security researcher Rob VandenBrink replicated the findings using "Create Memory Dump," while Morey Haber, chief security advisor at BeyondTrust, stated the practice "violates the principles of least privilege, zero trust, and secure application design."
  • Microsoft acknowledged the behavior, asserting it improves performance and is an "expected feature." A spokesperson stated, "Access to browser data as described in the reported scenario would require the device to already be compromised."
  • Experts broadly agree that administrative access equals full system compromise, sparking debate over whether the risk is overblown. Security professionals recommend using dedicated password managers rather than relying on browser-based storage.
Insights by Ground AI

15 Articles

HackReadHackRead
Reposted by
IT Security News - cybersecurity, infosecurity newsIT Security News - cybersecurity, infosecurity news

Researcher Shows Edge Browser Stores Saved Passwords in Plaintext

Cybersecurity expert Tom Rønning finds Microsoft Edge loads all saved passwords into computer memory as cleartext, making them easy for hackers to steal.

Think freely.Subscribe and get full access to Ground NewsSubscriptions start at $9.99/yearSubscribe

Bias Distribution

  • 80% of the sources are Center
80% Center

Factuality Info Icon

To view factuality data please Upgrade to Premium

Ownership

Info Icon

To view ownership data please Upgrade to Vantage

itavisen.no broke the news on Tuesday, May 5, 2026.
Too Big Arrow Icon
Sources are mostly out of (0)

Similar News Topics

News
Feed Dots Icon
For You
Search Icon
Search
Blindspot LogoBlindspotLocal