Story perspectives

Edge Stores Passwords in Plaintext RAM, Researchers Reveal

5/8/2026

Summary

Story summary

On 2026-05-06 a Microsoft spokesperson in the United States said Edge loads passwords into plaintext RAM.
Researcher Tom Jøran Sønstebyseter Rønning showed Edge decrypts all credentials at startup, keeps them in memory, and posted EdgeSavedPasswordsDumper on GitHub to dump the plaintext passwords.
An attacker with administrative or SYSTEM-level access could read Edge’s memory and extract all saved passwords.
Microsoft urged updates and antivirus; experts advised using a third-party password manager.

1 of 1

Story summary

On 2026-05-06 a Microsoft spokesperson in the United States said Edge loads passwords into plaintext RAM.
Researcher Tom Jøran Sønstebyseter Rønning showed Edge decrypts all credentials at startup, keeps them in memory, and posted EdgeSavedPasswordsDumper on GitHub to dump the plaintext passwords.
An attacker with administrative or SYSTEM-level access could read Edge’s memory and extract all saved passwords.
Microsoft urged updates and antivirus; experts advised using a third-party password manager.