Microsoft Edge Password Leak Controversy

Microsoft Edge is criticized for storing passwords in plaintext memory, with the company defending the practice as intentional and secure.

April 2026

Apr 29, 2026

Deep disclosed password dumping proof-of-concept for Edge

The author, Deep, disclosed a proof-of-concept demonstrating that Microsoft Edge stores saved passwords in cleartext within process memory. This disclosure was made on BigBiteOfTech by Norway.

Source ↗

May 2026

May 6, 2026

Microsoft Edge loads passwords into memory in plaintext

A discussion highlighted that Microsoft Edge loads user passwords into memory using plaintext format. This was mentioned in the context of a reported security concern.

Source ↗
May 6, 2026

Tool released to test Microsoft Edge password flaw

A tool was released that can test a reported flaw in Microsoft Edge. This flaw involves the browser storing passwords in plaintext memory upon startup.

Source ↗