Researcher Highlights Security Concerns Over How Microsoft Edge Handles Passwords in Memory

Thu, 07 May 2026 04:29:00 +0200

A security researcher has raised concerns about how Microsoft Edge manages stored passwords in system memory (RAM). According to the findings, after a user saves a password using Edge’s built-in password manager, the browser loads those credentials into RAM in plaintext form. By performing a memory dump, the researcher demonstrated that these passwords could be recovered without encryption, potentially exposing sensitive information.

One key issue identified is that Edge appears to load all saved passwords into memory after a single authentication event, even if the user is not actively visiting the associated websites. This behavior contrasts with other browsers like Google Chrome, which typically load credentials only when needed for a specific site and remove them from memory shortly after use. Edge, by comparison, reportedly retains the passwords in memory for longer periods, increasing the window of exposure.

Microsoft responded by downplaying the severity of the issue, emphasiz