Forum Discussion
MicrosoftPassword Monitor is now available in Microsoft Edge preview builds
what happens when microsoft have a leak, ALL passwords are vulnerable?
"all eggs in one basket"
martmcd I have a question; once monitor finds password intrusion, how do we know which one ? or are we to change them all? please help !
- Suhrid_Palsulehello,
Sorry about the delay in replying here!
Please go to edge://settings/passwords/passwordmonitor to see which of your username-password pairs have been flagged as unsafe and change only those. No need to change all at once. Deeddowdney from what has been said here, i understand you will get a notification that will tell you which one.
perhaps Suhrid_Palsule can confirm, or provide the answer to your question
- Suhrid_PalsuleReplied above. Thanks!
martmcd well, the monitor would notify you of that
, plus the passwords would be hashed and salted to make it more tricky, if they stored your password.If they don't store passwords, then they'll need to have the username and url to actually make it work as you cannot overwrite usernames in all sites as that would be a security issue. If that was the case on a webpage, the developers might as well allow code-injections like DROPTABLE because you could then just overwrite it and the account data would be gone for everyone.
The process could also be done locally (on the computer) too instead of the server although it would be, depending on your computer, slower.
- Suhrid_Palsule
Hi martmcd,
Not just Microsoft ... this same question has been posed to several other Password Managers (both browser built-in and dedicated applications) for many years now. It is also the subject of much research and there are several publications on this subject.
The short answer is that a user is much better-off using a Password Manager than not using one. Not using a password manager leads to poor password habits that increases risk for the user. And Password Manager applications employ extensive security protections and precautions to prevent such an event from occuring. You can read more about this subject, here: https://techcommunity.microsoft.com/t5/articles/autofill-blog-2-password-security/m-p/963847- Suhrid_Palsulede rien!
