11-19-2020 12:33 PM
11-19-2020 12:33 PM
This is a useful feature that LastPass has. this would prevent from creating multiple duplicate entries in Edge password manager and also manage logins more efficiently.
in LastPass it's called Equivalent domains, the description says:
"Add domains that use the same login service. We've already listed popular sites that use shared credentials across domains under their control. For example: amazon.com and its local variations, or gmail.com and other google products."
it's pretty clear, instead of saving 2 password entries for Facebook.com and Messenger.com , we use the same set of username and password for both websites. this also makes it easy when user changes password for one website, because the other one will be updated automatically.
here are more real and important examples:
a bit hard to share it through Edge feedback and also keep the proper formatting but i'll try.
11-23-2020 11:50 AM
thanks for this detailed feedback, @HotCakeX!
It's not hard to see how bundling these domains together and allowing saving of one username-password for all would be beneficial.
As it stands today, Microsoft Edge (and other Chromium browsers as well, but not 100% sure about all) classify passwords at the domain level. This works quite well for most use cases, but not in some special cases.
There are other efforts out there, as well, such as password-manager-resources/websites-with-shared-credential-backends.json at main · apple/password-ma... that aspire to empower browsers and password managers with the same capability. We are aware of this.
Your feedback is valued, and we will take the same into consideration. There are no further updates to share on this, at the moment.
11-23-2020 11:59 AM
11-23-2020 03:42 PM
11-23-2020 09:25 PM
Currently, even if the same username-password is reused on multiple sites they ALL get flagged in the alert as being at-risk. There is no common re-use warning for this scenario.
Password reuse is a common problem, but it can happen between both related and unrelated domains.