Edge browser has a serious password safety problem, but Microsoft says it’s by design

Microsoft Edge reportedly decrypts all saved passwords at startup and keeps them in memory until the browser closes.

Security researcher Tom Rønning said this leaves passwords exposed in cleartext memory for the whole session.

Microsoft said the behavior is intentional and designed to make sign-ins faster.

The finding raises concerns that malware or a compromised device could more easily steal browser-stored credentials.