ZDNet: Why Edge stores your passwords in plaintext, according to Microsoft. “A security researcher found that Edge stores your plaintext passwords in memory when you use the browser to manage them. In a social media post, researcher Tom Jøran Sønstebyseter Rønning explained how the process works and posted a video showing it in action.”

This dumb password rule is from Dutch Tax Authorities (Belastingdienst).

At least 8 and at most 25 characters, of which at least 3 of the characters were not used in the previous password.
No more than 3 of the same characters.
At least 1 upper case and 4 lower case characters.
No more than 3 special characters.

It's not like hashing passwords is a thing or something.

https://dumbpasswordrules.com/sites/dutch-tax-authorities-belastingdienst/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

Comparitech: Where do leaked passwords end up? A statistical analysis of the dark web’s credential pipeline https://www.comparitech.com/news/where-do-leaked-passwords-end-up-dark-webs-credential-pipeline/

More:

Betanews: What really happens to leaked credentials? https://betanews.com/article/what-really-happens-to-leaked-credentials/ @betanews @iandbarker #infosec #passwords #cybercrime

A security researcher demonstrated that Microsoft Edge stores saved passwords in plaintext memory after launch, making them accessible to malware or attackers with elevated system access.

Read more: https://hackread.com/edge-browser-stores-saved-plaintext-passwords/

#MicrosoftEdge #Cybersecurity #Passwords #Privacy

In honor of #WorldPasswordDay, I looked at the Internet exposure of 5 different password manager products with web-accessible vaults.

Vaultwarden was the most popular by far (62% of instances observed), followed by Passbolt and Bitwarden.

I did a deeper dive on Vaultwarden and Bitwarden and was surprised to see how relatively current these instances were:

+ 64% of Bitwarden instances appear to be running a version ~6 months old or newer
+ 65% of Vaultwarden instances appear to be ~5 months old or newer

Read more:

https://censys.com/blog/password-manager-infrastructure/

#passwords #vaultwarden #bitwarden #passbolt

Microsoft Edge Stores Passwords in Process Memory, Posing Enterprise Risk

An attacker with administrative privileges can gain access to Microsoft Edge user passwords even when they're not in use, because the browser stores them in cleartext in process memory as part of a design decision by Microsoft.

#microsoft #edge #password #passwords #security #cybersecurity #hackers #hacking

https://www.darkreading.com/cyber-risk/microsoft-edge-passwords-enterprise-risk

#MicrosoftEdge keeps all saved #passwords unencrypted

https://proton.me/business/blog/microsoft-edge-passwords-exposed

#cybersecurity #Microsoft #Edge

A famous hacker who was on the FBI most wanted list used his cat’s name as his password, followed by ‘123.’

Happy World Password Day!

https://topicaltens.blogspot.com/2026/05/6-may-passwords.html

#WorldPasswordDay #Passwords

This dumb password rule is from College Board.

Password must be 9-30 characters with at least one upper case letter, one lower case letter, one number and one special character (no spaces) and be different than your username.

https://dumbpasswordrules.com/sites/college-board/

#password #passwords #infosec #cybersecurity #dumbpasswordrules