Scared that Edge loads your passwords into memory in plaintext? A dedicated password manager keeps them inside an encrypted vault

A security researcher recently revealed that Microsoft Edge stores and loads all saved passwords in plaintext in your PC's memory, not on disk, upon startup. Edge is the only Chromium browser that does this, according to researcher @L1v1ng0ffTh3L4N.

The revelation raised questions about the security of Edge's password management. The timing wasn’t great for Microsoft, since today is World Password Day and more people are thinking about password security.

Microsoft disagrees with the idea that passwords loading in plaintext is an issue. The company notes that accessing that information would require a PC to already be compromised. The tech giant goes as far as to suggest the behavior is a feature, not a bug:

Latest Videos From

"Safety and security are foundational to Microsoft Edge. Access to browser data as described in the reported scenario would require the device to already be compromised. Design choices in this area involve balancing performance, usability, and security, and we continue to review it against evolving threats. Browsers access password data in memory to help users sign in quickly and securely - this is an expected feature of the application. We recommend users install the latest security updates and antivirus software to help protect against security threats."

If Microsoft's approach to storing and loading passwords has you worried, or if you're just trying to improve security in honor of World Password Day, I recommend getting a dedicated password manager.

Why use a dedicated password manager

Storing passwords in a browser is easy, convenient, and free. The built‑in syncing in Edge, Chrome, and Safari works well enough for everyday, low‑risk accounts such as newsletters or forums.

But anything that touches your identity, finances, or personal data deserves more protection. A dedicated password manager adds a separate layer of security that isn’t tied to your browser, your operating system, or your primary cloud account.

Most password managers use authentication that is separate from your device or primary cloud account, which means an attacker would need to compromise both your vault and your master password to get in.

Dedicated password managers are more resistant to phishing attacks than browsers as well.

Which password manager is best?

Even among the best password managers, NordPass stands out. It's the top-ranked password manager by our colleagues at TechRadar and earned a near-perfect score in their review.

NordPass is owned by Nord Security, which is one of the largest consumer-focused cybersecurity companies. NordVPN is also part of the Nord Security group.

NordPass supports unlimited password storage, scans for data breaches, and can mask your email address.

Password generation, biometric support, and multi-factor authentication are all supported as well. NordPass has some handy features like secure sharing of passwords and granting a friend or family member emergency access.

There are Premium and Family plans available, both of which go on sale frequently. Between us, NordPass is on sale so often I recommend holding off if it's at full price. But right now, it is on sale. NordPass Premium costs $1.49 per month if you buy a two-year plan. NordPass Family costs $2.79 when you purchase a two-year plan.

There is also a free tier available if you'd like to dip your toe in or prefer to test NordPass before committing any money.

Join us on Reddit at r/WindowsCentral to share your insights and discuss our latest news, reviews, and more.