Microsoft Edge stores all passwords in memory in clear text, even when unused

Re:Microsoft Edge stores all passwords in memory in clear te... by slow_typist on Monday May 04, 2026 @04:59PM (#48014907)

All true, but it is still bad style. There is no need to keep decrypted passwords in memory the user hasn’t even used in the session (or after they logged in to a certain website).

[ Parent | on HN ]

Re:Microsoft Edge stores all passwords in memory in clear te... by netrap on Tuesday May 05, 2026 @11:14AM (#48023663)

So you decrypt each time you need it? What is the difference in the attack surface?

[ Parent | on HN ]

Re:Microsoft Edge stores all passwords in memory in clear te... by slow_typist on Friday May 08, 2026 @05:18PM (#48068898)

What I don’t need doesn’t need to live unencrypted in my RAM. Of course I do. It is standard behaviour of iOS, and of a lot of password managers. If someone grabs my laptop and runs, at least they can’t capture my hn account.

[ Parent | on HN ]