Edge removes passwords from RAM following security researcher’s criticism
Microsoft is updating Microsoft Edge so that saved passwords are no longer automatically loaded into memory upon startup.
Security researcher Tom Jøran Sønstebyseter Rønning discovered that passwords remained unencrypted in the RAM, even without visiting the associated websites. According to the researcher, other Chromium browsers, such as Google Chrome, did not exhibit this behavior.
Microsoft initially called it “by design,” but now acknowledges that additional protection is desirable if systems are already compromised.
The change appears starting from Edge 148 and serves as an extra layer of security against the misuse of passwords in memory.
Read the article for more information.