SOLVED

DPAPI/OSCrypt bug and similar ...

%3CLINGO-SUB%20id%3D%22lingo-sub-1787469%22%20slang%3D%22en-US%22%3EDPAPI%2FOSCrypt%20bug%20and%20similar%20...%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1787469%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F470968%22%20target%3D%22_blank%22%3E%40MissyQ%3C%2FA%3E%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F484598%22%20target%3D%22_blank%22%3E%40fawkes%3C%2FA%3E%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F317619%22%20target%3D%22_blank%22%3E%40ericlaw%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAny%20news%20of%20fixes%20for%20the%20faults%20that%20cause%20loss%20of%20log-in%20data%2C%20e.g.%20when%20a%20scheduled%20task%20uses%20S4U%20or%20when%20%3CEM%3EHosted%20app%20data%3C%2FEM%3E%20is%20set%20to%20clear%20on%20close%3F%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fbugs.chromium.org%2Fp%2Fchromium%2Fissues%2Fdetail%3Fid%3D1069383%23c90%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E1069383%20-%20TokenService%20fails%20to%20load%20after%20CryptUnprotectData%20failure%2C%20causing%20cookies%20and%20sync%20to%20reset%20-%20chromium%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fanswers.microsoft.com%2Fmessage%2F334c3915-fd72-414b-9b09-af7220c7cf79%3FthreadId%3D0ffc8ae2-11cc-480c-b988-18ffc4a669d1%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3EThread%20%22Starting%20this%20morning%2C%20Edge%20does%20not%20remember%20logins%20to%20any%20website%22%20page%201%3A%E2%80%82Missy%20Quarry's%20reply%20on%20October%2012%2C%202020%20(microsoft.com)%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3EAre%20these%20two%20related%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1791376%22%20slang%3D%22en-US%22%3ERe%3A%20DPAPI%2FOSCrypt%20bug%20and%20similar%20...%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1791376%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F9548%22%20target%3D%22_blank%22%3E%40Noel%20Burgess%3C%2FA%3E%26nbsp%3BThanks%20for%20reaching%20out.%20I%20asked%20someone%20from%20the%20team%20to%20look%20into%20this%2C%20and%20they%20agreed%20that%20those%20do%20seem%20related.%20I%20don't%20have%20any%20news%20to%20share%20yet%20about%20a%20fix%2C%20but%20I%20will%20let%20you%20know%20if%20I%20hear%20otherwise!%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CI%3EFawkes%20(they%2Fthem)%3CBR%20%2F%3EProgram%20Manager%20%26amp%3B%20Community%20Manager%20-%20Microsoft%20Edge%3CI%3E%3C%2FI%3E%3C%2FI%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1792645%22%20slang%3D%22en-US%22%3ERe%3A%20DPAPI%2FOSCrypt%20bug%20and%20similar%20...%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1792645%22%20slang%3D%22en-US%22%3E%3CBLOCKQUOTE%3E%3CHR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F484598%22%20target%3D%22_blank%22%3E%40fawkes%3C%2FA%3E%26nbsp%3Bwrote%3A%3CBR%20%2F%3E%3CP%3EI%20will%20let%20you%20know%20if%20I%20hear%20otherwise!%3C%2FP%3E%3C%2FBLOCKQUOTE%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F484598%22%20target%3D%22_blank%22%3E%40fawkes%3C%2FA%3E%26nbsp%3B%3CBR%20%2F%3EThanks%20%F0%9F%99%87%E2%80%8D%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Frequent Contributor

@MissyQ @fawkes @ericlaw 

 

Any news of fixes for the faults that cause loss of log-in data, e.g. when a scheduled task uses S4U or when Hosted app data is set to clear on close? 

1069383 - TokenService fails to load after CryptUnprotectData failure, causing cookies and sync to r... 

Thread "Starting this morning, Edge does not remember logins to any website" page 1: Missy Quarry's ...

Are these two related?

 

 

5 Replies
Highlighted

@Noel Burgess Thanks for reaching out. I asked someone from the team to look into this, and they agreed that those do seem related. I don't have any news to share yet about a fix, but I will let you know if I hear otherwise!

 

Fawkes (they/them)
Program Manager & Community Manager - Microsoft Edge

Highlighted

@fawkes wrote:

I will let you know if I hear otherwise!

@fawkes 
Thanks 🙇‍

Highlighted
Best Response confirmed by Noel Burgess (Frequent Contributor)
Microsoft Verified Best Answer
Solution

@Noel Burgess These two issues are effectively unrelated.

 

The DPAPI+S4U Issue (https://crbug.com/1069383) causes loss of Edge's encryption key that protects cookies and credentials. This issue will require a monthly update to Windows 10 to fix; we do not have a date for that fix to announce. https://textslashplain.com/2020/09/28/local-data-encryption-in-chromium/

 

The Hosted App Data Clear-on-Exit-causes-Cookie-loss issue was a bug in our code. As I understand it, it has already been fixed in Canary.

Highlighted

@ericlaw 

 

Thanks! I'll pass the message on.

Highlighted

@ericlaw 

 

One new red herring data point: a user posted this at Answers, referring to 'missing log-in' sufferers:

I am wondering how many of these folks are using System Mechanic Ultimate Defense from Iolo.  I am, but with Private Guardian, which is new, it deletes saved passwords from my pc.  Turned off and passwords are not deleted.