Password Management
Ongoing coverage on Password Management.
Latest coverage
Proton's Black Friday sale is already live: ditch Google with up to 70% off its VPN and 50% off unlimited plan
Proton has launched its Black Friday sale, offering significant discounts on its suite of privacy-focused services. Proton Unlimited is available with up to 70% off, including mail, calendar, cloud storage, and password management tools. Proton VPN is also discounted, with a 24-month plan offering substantial savings. These deals are presented as an attractive alternative to Google's services for users concerned about online privacy.
Evening Safety Dance
Microsoft is implementing a fix for how its Edge browser stores user passwords. This update aims to improve the security and management of saved credentials within the browser.
Microsoft reiterates that it's totally fine with Edge storing passwords in cleartext, despite security…
Microsoft has confirmed that Microsoft Edge stores saved passwords in cleartext within the browser's memory, a design choice intended to balance performance and usability. While Microsoft states this requires the device to already be compromised, security researchers highlight that this vulnerability could allow attackers with admin rights to easily access sensitive credentials, especially in shared environments. The company recommends users maintain up-to-date security software.
Microsoft Edge saves passwords in cleartext 'by design' and researchers argue 'this turns into a credential harvest' on shared PCs
Cybersecurity researcher Tom Jøran Sønstebyseter Rønning discovered that Microsoft Edge saves passwords in memory in cleartext, a behavior Microsoft has stated is "by design." This method differs from other Chromium-based browsers like Chrome, which only decrypt credentials when needed. Critics argue this practice creates a significant security risk, especially on shared PCs, potentially leading to credential harvesting.
