Microsoft Edge saves passwords in cleartext 'by design' and researchers argue 'this turns into a credential harvest' on shared PCs

Cybersecurity researcher Tom Jøran Sønstebyseter Rønning discovered that Microsoft Edge saves passwords in memory in cleartext, a behavior Microsoft has stated is "by design." This method differs from other Chromium-based browsers like Chrome, which only decrypt credentials when needed. Critics argue this practice creates a significant security risk, especially on shared PCs, potentially leading to credential harvesting.

• Entities
• Company: Microsoft
• Topic: Password Management
• Topic: Cybersecurity
• Platform: PC
• Person: Tom Jøran Sønstebyseter Rønning