password manager

Microsoft Edge’s password manager has become easier to use in daily browsing, but harder to find if you are following an older guide. The controls once associated with Wallet, Microsoft Authenticator autofill, or legacy Edge settings now live under Passwords and autofill and Microsoft Password...

The LastPass: Free Password Manager extension in Google Chrome can usually be restored by enabling or pinning it, restoring its website access, updating Chrome, and then repairing or reinstalling the extension if necessary. These steps apply to Chrome on Windows 10 and Windows 11 computers using...

Google Chrome before version 150.0.7871.47 contained CVE-2026-13982, a medium-severity flaw in the browser’s Passwords interface that could let an attacker spoof security UI after first compromising the renderer process with a crafted HTML page. The vulnerability was published by Chrome on June...

Google fixed CVE-2026-14009 in the June 30, 2026 Chrome 150 stable desktop update, patching an insufficient data validation flaw in Chrome’s Passwords component that affected versions before 150.0.7871.47 and could allow heap corruption through a crafted HTML page. The short version is simple...

Google patched CVE-2026-14019 in Chrome 150.0.7871.47 for Windows and Mac on June 30, 2026, fixing a medium-severity Passwords-component flaw that could let a remote attacker leak cross-origin data through a crafted HTML page if a user visited it. The National Vulnerability Database entry, fed...

ExpressVPN announced on July 2, 2026, that ExpressKeys, its standalone password manager for mobile apps and browser extensions, now supports passkeys, secure item sharing, direct credential imports, card scanning, account recovery improvements, and a fresh independent security audit by Cure53...

Microsoft Edge’s Custom Primary Password is being retired on a fixed schedule: new users lost access on March 5, 2026, existing opted-in users are being warned now, and the feature is removed for opted-in users on June 4, 2026. Windows admins should migrate affected profiles to device-based...

Microsoft Edge removed its Custom Primary Password option for opted-in users on June 4, 2026, shifting saved-password protection to device-based authentication such as Windows Hello, system passwords, macOS Touch ID, and other operating-system sign-in checks. The move is not just a browser...

Microsoft has pushed passkeys from a future-facing concept into a practical sign-in option for both personal and work/school accounts, and the company’s guidance now makes the process feel deliberately familiar: pick a device, choose a storage location, confirm with a biometric or PIN, and you...

Windows is powerful, but even after years of refinements it still leaves small, persistent gaps that interrupt workflows, force clumsy workarounds, or push you toward cloud services and subscriptions you don’t want. Over the past year I’ve leaned on a handful of free, open-source tools that...

Researchers from ETH Zurich and the Università della Svizzera italiana have published a sobering analysis showing that modern cloud-based password managers — the very tools many of us rely on to keep dozens or hundreds of unique credentials secure — are vulnerable to a family of practical...

Today’s paper from cryptographers at ETH Zurich and the Università della Svizzera italiana shatters a comforting shortcut many of us keep telling friends and colleagues: the marketing line that your cloud password manager has “zero knowledge” of your vault is not an absolute guarantee once you...

A massive, unsecured database containing roughly 149 million unique usernames and passwords — an estimated 96 GB of raw data — was discovered and reported this month by security researcher Jeremiah Fowler, and the fallout should be a wake-up call for every Windows user and administrator who...

Samsung’s PC browser beta has just taken a meaningful step toward tighter credential protection: the latest Samsung Internet for PC beta (version 29.0.0.148) now requires Windows sign‑in verification before Samsung Pass will reveal saved credentials, forcing local Windows authentication — PIN...