Microsoft Edge password manager reveals clear‑text passwords after restart

A security test of the Microsoft Edge browser in Denmark showed that passwords saved in the built‑in password manager can be recovered in clear text from a memory dump after the browser is closed and restarted. The experiment created a password, saved it, then performed a memory dump after a restart, exposing the full password in readable form. Researchers reported the finding to Microsoft, which described it as a deliberate design choice rather than a bug. While Edge encrypts passwords on the user interface, they may remain decrypted in memory while the browser runs, contrary to standard security practice that passwords should be decrypted only at the moment of use and then cleared. The discovery raises concerns for users who rely on the browser’s password manager for sensitive credentials, prompting recommendations to consider alternative password‑management solutions.