DPAPI/OSCrypt bug and similar ...

[Noel Burgess]

@MissyQ @Deleted @Eric_Lawrence 

Any news of fixes for the faults that cause loss of log-in data, e.g. when a scheduled task uses S4U or when Hosted app data is set to clear on close? 

1069383 - TokenService fails to load after CryptUnprotectData failure, causing cookies and sync to reset - chromium 

Thread "Starting this morning, Edge does not remember logins to any website" page 1: Missy Quarry's reply on October 12, 2020 (microsoft.com)

Are these two related?

[#2]

@Noel Burgess Thanks for reaching out. I asked someone from the team to look into this, and they agreed that those do seem related. I don't have any news to share yet about a fix, but I will let you know if I hear otherwise!

Fawkes (they/them)
Program Manager & Community Manager - Microsoft Edge

[#3]

---

@Deleted wrote:

I will let you know if I hear otherwise!

@Deleted 
Thanks 🙇‍

[#4 · Accepted solution]

@Noel Burgess These two issues are effectively unrelated.

The DPAPI+S4U Issue (https://crbug.com/1069383) causes loss of Edge's encryption key that protects cookies and credentials. This issue will require a monthly update to Windows 10 to fix; we do not have a date for that fix to announce. https://textslashplain.com/2020/09/28/local-data-encryption-in-chromium/

The Hosted App Data Clear-on-Exit-causes-Cookie-loss issue was a bug in our code. As I understand it, it has already been fixed in Canary.

[#5]

@Eric_Lawrence 

Thanks! I'll pass the message on.

[#6]

@Eric_Lawrence 

One new red herring data point: a user posted this at Answers, referring to 'missing log-in' sufferers:

I am wondering how many of these folks are using System Mechanic Ultimate Defense from Iolo.  I am, but with Private Guardian, which is new, it deletes saved passwords from my pc.  Turned off and passwords are not deleted.