Microsoft Edge stores all passwords in memory in clear text, even when unused

Re:Microsoft Edge stores all passwords in memory in clear te... by giancarlostoro on Monday May 04, 2026 @07:05PM (#48016121)

I wonder about those kinds of exploits that sit on a webpage, but what stops someone from injecting their payload on a sites login page? JS can grab the password in plaintext in such a scenario, at which point the password manager does not save you. Can we normalize Passkey more?

[ Parent | on HN ]

Re:Microsoft Edge stores all passwords in memory in clear te... by IgorPartola on Monday May 04, 2026 @07:51PM (#48016444)

I think the point is that you can have arbitrary website read the browser’s memory so example.com can read the password for example.org and example.net.

[ Parent | on HN ]

Re:Microsoft Edge stores all passwords in memory in clear te... by traderj0e on Monday May 04, 2026 @10:26PM (#48017421)

Or the computer's memory via Meltdown and Spectre-like attacks

[ Parent | on HN ]

Re:Microsoft Edge stores all passwords in memory in clear te... by anthk on Tuesday May 05, 2026 @05:16AM (#48019963)

That's why I disable JS by default with UBlock Origin. And OFC never allow JS to acces your clipbaord.

[ Parent | on HN ]