{"id":237232,"date":"2026-05-15T22:18:10","date_gmt":"2026-05-16T03:18:10","guid":{"rendered":"https:\/\/lifeboat.com\/blog\/2026\/05\/microsoft-backpedals-edge-to-stop-loading-passwords-into-memory"},"modified":"2026-05-15T22:18:10","modified_gmt":"2026-05-16T03:18:10","slug":"microsoft-backpedals-edge-to-stop-loading-passwords-into-memory","status":"publish","type":"post","link":"https:\/\/lifeboat.com\/blog\/2026\/05\/microsoft-backpedals-edge-to-stop-loading-passwords-into-memory","title":{"rendered":"Microsoft backpedals: Edge to stop loading passwords into memory"},"content":{"rendered":"<p><a class=\"aligncenter blog-photo\" href=\"https:\/\/lifeboat.com\/blog.images\/microsoft-backpedals-edge-to-stop-loading-passwords-into-memory.jpg\"><\/a><\/p>\n<p>Microsoft is updating the Edge web browser to ensure it no longer loads saved passwords into process memory in clear text at startup after previously stating it was \u201cby design.\u201d<\/p>\n<p>This behavior was disclosed on May 4 by security researcher Tom J\u00f8ran S\u00f8nstebyseter R\u00f8nning, <a href=\"https:\/\/twitter.com\/L1v1ng0ffTh3L4N\/status\/2051308329880719730\" target=\"_blank\" rel=\"nofollow noopener\">who demonstrated<\/a> that all credentials stored in the Edge built-in password manager were decrypted on launch and kept in memory even when not in use.<\/p>\n<p>R\u00f8nning also <a href=\"https:\/\/github.com\/L1v1ng0ffTh3L4N\/EdgeSavedPasswordsDumper\" target=\"_blank\" rel=\"nofollow noopener\">released a proof-of-concept (PoC) tool<\/a> that would allow attackers with Administrator privileges to dump passwords from other users\u2019 Edge processes (without admin privileges, the PoC only allows accessing Edge processes launched by the same user).<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Microsoft is updating the Edge web browser to ensure it no longer loads saved passwords into process memory in clear text at startup after previously stating it was \u201cby design.\u201d This behavior was disclosed on May 4 by security researcher Tom J\u00f8ran S\u00f8nstebyseter R\u00f8nning, who demonstrated that all credentials stored in the Edge built-in password [\u2026]<\/p>\n","protected":false},"author":427,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1492],"tags":[],"class_list":["post-237232","post","type-post","status-publish","format-standard","hentry","category-security"],"_links":{"self":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/237232","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/users\/427"}],"replies":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/comments?post=237232"}],"version-history":[{"count":0,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/237232\/revisions"}],"wp:attachment":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/media?parent=237232"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/categories?post=237232"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/tags?post=237232"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}