Password saving

JohnGo · Jul 1, 2022

How secure is the password saving option in Win 11?

Senecio · Jul 1, 2022

I think this is an interesting question, and I hope someone with more knowledge than I have about such things will answer in due course. The official answer I found here: Microsoft Edge password manager security and it sounds fine - as long as someone doesn't have remote access to your system, in which case all bets are off anyway.
I certainly use it, and find it very convenient, but I don't use it for banking or other financial or similar sites.
John

TairikuOkami · Jul 1, 2022

As long as you do not allow an automatic autofill, it is perfectly safe.

Dru2 · Jul 1, 2022

JohnGo said:
How secure is the password saving option in Win 11?

My opinion... I've been using password saving since Windows 10 and have never had any issues with it... security or otherwise.

Like anything online or using online tech, there's always going be the doubters and trustless souls who say otherwise so...

Peace

A Guy · Jul 2, 2022

Microsoft Edge password manager security

docs.microsoft.com

Anyone with access to your PC directly or remotely can export your passwords to a .csv file and they are in text format. Vivaldi requires the Windows login password to view or export any passwords. If someone has the Windows Password, and access it all goes out the window

A Guy

Dru2 · Jul 2, 2022

A Guy said:
Microsoft Edge password manager security

Microsoft Edge password manager security

docs.microsoft.com

Anyone with access to your PC directly or remotely can export your passwords to a .csv file and they are in text format. Vivaldi requires the Windows login password to view or export any passwords. If someone has the Windows Password, and access it all goes out the window

A Guy

The part you left out in an attempt to scare monger is Edge requires the same...

The Microsoft Edge password manager encrypts passwords so they can only be accessed when a user is logged on to the operating system. Even if an attacker has admin rights or offline access and can get to the locally stored data, the system is designed to prevent the attacker from getting the plaintext passwords of a user who isn't logged in.

Source: your link above

That said, be reminded, security is only as strong as the weakest link - which is always the end user. If you choose to store sensitive data on a PC, you should also do everything in your power to secure said PC.

A Guy · Jul 2, 2022

Attempt to scare monger? Where do you get that from? I only stated some facts. I also mentioned if someone has the Windows password, it's all out the window. I'm not knocking Edge, but methinks you don't want any negatives? And no, Edge does not require the same. Vivaldi also requires the password even when signed into Windows

In any case, the question was about password security and I gave info on that for the OP. They can decide if the issue makes them secure or not...zero mongering involved

A Guy

Fabler2 · Jul 2, 2022

A Guy said:
Attempt to scare monger? Where do you get that from? I only stated some facts. I also mentioned if someone has the Windows password, it's all out the window. I'm not knocking Edge, but methinks you don't want any negatives? And no, Edge does not require the same. Vivaldi also requires the password even when signed into Windows

In any case, the question was about password security and I gave info on that for the OP. They can decide if the issue makes them secure or not...zero mongering involved

A Guy

Yes, so much for Microsoft's push for security. If you want to see the passwords then you have to use PIN/password, if you want to export passwords then 'yeah go ahead - just know people can see them..'

EDIT.

Oops, I went one step further after the warning, and it does ask for PIN/password before allowing export :eyeroll:

So that's good. Sorry Ms for doubting you!

hsehestedt · Jul 2, 2022

For that extra bit of security, consider a BitLocker encryption of the OS drive.

BruceR · Jul 2, 2022

Fabler2 said:
Yes, so much for Microsoft's push for security. If you want to see the passwords then you have to use PIN/password, if you want to export passwords then 'yeah go ahead - just know people can see them..'

Make perfect sense

Exporting passwords from Edge also requires a PIN/Password etc.:

5 Click/tap on Export passwords to confirm. (see screenshot below)

...

6 When prompted by Windows Security, choose how you want to enter your password, PIN, or Face for your account in Windows 10, and enter any required credentials to approve. (see screenshots below)

How to Export Saved Passwords for Sites in Microsoft Edge Chromium

Fabler2 · Jul 2, 2022

hsehestedt said:
For that extra bit of security, consider a BitLocker encryption of the OS drive.

No. Knowing my scatterbrain it would get messed up at some stage :)

Fabler2 · Jul 2, 2022

BruceR said:
Exporting passwords from Edge also requires a PIN/Password etc.:

See my edit in previous post.

A Guy · Jul 2, 2022

OK, my bad I don't save any passwords in Edge. But I didn't post to shame Edge for that

A Guy

Dark Knight · Jul 2, 2022

I do not let any browser have access to any of my passwords, it just doesn't make sense from a security standpoint, if you gain access to the system ---> you have access to the passwords.
I use Bitwarden which can have it's vault exported to multiple file formats , but using a different pin/password than Windows they are not vulnerable, so even if one gains access to my system they won't gain access to my passwords in Bitwarden's encrypted vault, which unlike your browser that stores your passwords locally, Bitwarden does not.

Without knocking Edge or any browser for that matter , letting your browser or OS save / store your passwords is just not a good idea, it's not smart or safe, I don't care how good the security is they brag about. Good security today is Swiss cheese tomorrow. If Windows or Edge were so secure there would never be any need for security updates ... lol.

Dru2 · Jul 2, 2022

Fabler2 said:
EDIT.

Oops, I went one step further after the warning, and it does ask for PIN/password before allowing export
So that's good. Sorry Ms for doubting you!

Yep, not as unsecure as people think

You also need to use Credential Manager to see those passwords...

Accessing Credential Manager - Microsoft Support

Accessing Credential Manager

support.microsoft.com

Fabler2 · Jul 2, 2022

Dru2 said:
Yep, not as unsecure as people think

You also need to use Credential Manager to see those passwords...

Accessing Credential Manager - Microsoft Support

Accessing Credential Manager

support.microsoft.com

View attachment 32892

I just had to type in my Pin. No Credential Manager.

2022-07-02 16_27_47-Settings and 7 more pages - Personal 2 - Microsoft Edge.png

ShamrockRig · Jul 2, 2022

Hahaha people can't resist getting in a sly indirect passive aggressive dig and take the respectful route for once can they lol.

Dru2 · Jul 2, 2022

Fabler2 said:
I just had to type in my Pin. No Credential Manager.

View attachment 32898

Right, it's just a matter of where you try to access from. Credential Manager can use pin or password.

JohnGo · Jul 3, 2022

OK, Thanks for a lot of information I do not really know how to implement. What i have been doing is keeping my passwords on a spreadsheet saved on my archive USB drive. It is a little cumbersome as I need to plug it in whenever I access a sensitive website and have to unplug the USB and close the web sheet when I am logged on, but this may be the simplest solution. I will continue this.
John

Password saving

New member

My Computer

Well-known member

My Computers

Microsoft 365 Basic

My Computer

Well-known member

My Computers

Righteous Dude

My Computers

Well-known member

My Computers

Righteous Dude

My Computers

Well-known member

My Computers

Well-known member

My Computers

Well-known member

My Computer

Well-known member

My Computers

Well-known member

My Computers

Righteous Dude

My Computers

Well-known member

My Computer

Well-known member

My Computers

Well-known member

My Computers

Rock H Semi Erin Go Bragh

My Computer

Well-known member

My Computers

New member

My Computer

Similar threads