Wednesday 5 January 2022

Microsoft Edge’s half-baked password manager might now be worth a look

Microsoft is preparing to roll out a new version of the in-built password manager for its Edge web browser.

Currently under development, the new-look password management feature will allow users to add credentials to their roster manually for the first time.

At the moment, Microsoft Edge requires users to visit a website, log in and wait for a prompt from the browser. By introducing a manual option, Microsoft will minimize the friction associated with adding passwords en masse.

The ability to add account credentials manually first featured in an early-access build of Google Chrome, which is based on the same Chromium engine as Edge. Microsoft appears to have built upon this foundation to port the functionality over to its own service.

It’s unclear precisely when the feature will make its way into a full public build, but it is currently available to members of the Edge Canary channel under the Profile menu.

Microsoft Edge password manager

Microsoft first introduced password management functionality to its flagship browser in January last year, offering users a simple alternative to fully-featured services like LastPass and Dashlane, which cost in the region of $40/year.

The idea was to give users a cost-effective way to limit the risk of credential stuffing, brute force attacks and identity theft.

However, recent reports suggest it may still be ill-advised to store your account credentials in your web browser, as opposed to using a dedicated service.

According to security company AhnLab, info-stealing Redline malware is capable of both evading antivirus software and stealing passwords and other sensitive data from its victim’s browser.

In a recent incident, an infection resulted in the compromise of a corporate network, after VPN credentials were stolen from a remote employee’s web browser.

From a cybersecurity perspective, although storing unique passwords in Microsoft Edge is better than deploying an identical password across multiple accounts, it shouldn’t be considered the perfect solution.

Via WindowsLatest

https://ift.tt/3pUGJ69

No comments:

Post a Comment