Forum Discussion
[Bug] Password manager exposes the password length and decrypts without a private key!
This is a security issue that is out in the wild, though I do not think it is that so severe that it poses a risk to mention it here. The page edge://settings/passwords allows the person in front...
To reiterate, Edge does not blindly trust the person sitting in front of the computer. It does ask the PIN from the user before showing the password in clear text.
However, while it doesn't fully trust the person sitting in front, it apparently trusts them "somewhat". It displays the true length of the password without PIN.
I don't see any reason for this "human-like" behavior, where the software (Microsoft Edge) doesn't fully trust or distrust the user, but trusts them "somewhat".
Hi, please see this post:
now the password length is also hidden
