Password saving

How secure is the password saving option in Win 11?

I think this is an interesting question, and I hope someone with more knowledge than I have about such things will answer in due course. The official answer I found here: Microsoft Edge password manager security and it sounds fine - as long as someone doesn't have remote access to your system, in which case all bets are off anyway.
I certainly use it, and find it very convenient, but I don't use it for banking or other financial or similar sites.
John

As long as you do not allow an automatic autofill, it is perfectly safe.

JohnGo said:

How secure is the password saving option in Win 11?

Click to expand...

My opinion... I've been using password saving since Windows 10 and have never had any issues with it... security or otherwise.

Like anything online or using online tech, there's always going be the doubters and trustless souls who say otherwise so...

Peace

Anyone with access to your PC directly or remotely can export your passwords to a .csv file and they are in text format. Vivaldi requires the Windows login password to view or export any passwords. If someone has the Windows Password, and access it all goes out the window

A Guy

A Guy said:

Microsoft Edge password manager security

Microsoft Edge password manager security

docs.microsoft.com

Anyone with access to your PC directly or remotely can export your passwords to a .csv file and they are in text format. Vivaldi requires the Windows login password to view or export any passwords. If someone has the Windows Password, and access it all goes out the window

A Guy

Click to expand...

The part you left out in an attempt to scare monger is Edge requires the same...

The Microsoft Edge password manager encrypts passwords so they can only be accessed when a user is logged on to the operating system. Even if an attacker has admin rights or offline access and can get to the locally stored data, the system is designed to prevent the attacker from getting the plaintext passwords of a user who isn't logged in.

Click to expand...

Source: your link above

That said, be reminded, security is only as strong as the weakest link - which is always the end user. If you choose to store sensitive data on a PC, you should also do everything in your power to secure said PC.

Attempt to scare monger? Where do you get that from? I only stated some facts. I also mentioned if someone has the Windows password, it's all out the window. I'm not knocking Edge, but methinks you don't want any negatives? And no, Edge does not require the same. Vivaldi also requires the password even when signed into Windows

In any case, the question was about password security and I gave info on that for the OP. They can decide if the issue makes them secure or not...zero mongering involved

A Guy

A Guy said:

Attempt to scare monger? Where do you get that from? I only stated some facts. I also mentioned if someone has the Windows password, it's all out the window. I'm not knocking Edge, but methinks you don't want any negatives? And no, Edge does not require the same. Vivaldi also requires the password even when signed into Windows

In any case, the question was about password security and I gave info on that for the OP. They can decide if the issue makes them secure or not...zero mongering involved

A Guy

Click to expand...

Yes, so much for Microsoft's push for security. If you want to see the passwords then you have to use PIN/password, if you want to export passwords then 'yeah go ahead - just know people can see them..'

EDIT.

Oops, I went one step further after the warning, and it does ask for PIN/password before allowing export
So that's good. Sorry Ms for doubting you!

For that extra bit of security, consider a BitLocker encryption of the OS drive.

Fabler2 said:

Yes, so much for Microsoft's push for security. If you want to see the passwords then you have to use PIN/password, if you want to export passwords then 'yeah go ahead - just know people can see them..'

Make perfect sense

Click to expand...

Exporting passwords from Edge also requires a PIN/Password etc.:

5 Click/tap on Export passwords to confirm. (see screenshot below)

...

6 When prompted by Windows Security, choose how you want to enter your password, PIN, or Face for your account in Windows 10, and enter any required credentials to approve. (see screenshots below)

How to Export Saved Passwords for Sites in Microsoft Edge Chromium

Click to expand...

hsehestedt said:

For that extra bit of security, consider a BitLocker encryption of the OS drive.

Click to expand...

No. Knowing my scatterbrain it would get messed up at some stage :)

BruceR said:

Exporting passwords from Edge also requires a PIN/Password etc.:

Click to expand...

See my edit in previous post.

OK, my bad I don't save any passwords in Edge. But I didn't post to shame Edge for that

A Guy

I do not let any browser have access to any of my passwords, it just doesn't make sense from a security standpoint, if you gain access to the system ---> you have access to the passwords.
I use Bitwarden which can have it's vault exported to multiple file formats , but using a different pin/password than Windows they are not vulnerable, so even if one gains access to my system they won't gain access to my passwords in Bitwarden's encrypted vault, which unlike your browser that stores your passwords locally, Bitwarden does not.

Without knocking Edge or any browser for that matter , letting your browser or OS save / store your passwords is just not a good idea, it's not smart or safe, I don't care how good the security is they brag about. Good security today is Swiss cheese tomorrow. If Windows or Edge were so secure there would never be any need for security updates ... lol.

Fabler2 said:

EDIT.

Oops, I went one step further after the warning, and it does ask for PIN/password before allowing export
So that's good. Sorry Ms for doubting you!

Click to expand...

Yep, not as unsecure as people think

You also need to use Credential Manager to see those passwords...

Dru2 said:

Yep, not as unsecure as people think

You also need to use Credential Manager to see those passwords...

Accessing Credential Manager - Microsoft Support

Accessing Credential Manager

support.microsoft.com

View attachment 32892

Click to expand...

I just had to type in my Pin. No Credential Manager.

Hahaha people can't resist getting in a sly indirect passive aggressive dig and take the respectful route for once can they lol.

Fabler2 said:

I just had to type in my Pin. No Credential Manager.

View attachment 32898

Click to expand...

Right, it's just a matter of where you try to access from. Credential Manager can use pin or password.

OK, Thanks for a lot of information I do not really know how to implement. What i have been doing is keeping my passwords on a spreadsheet saved on my archive USB drive. It is a little cumbersome as I need to plug it in whenever I access a sensitive website and have to unplug the USB and close the web sheet when I am logged on, but this may be the simplest solution. I will continue this.
John