How does Edge Dev (chromium) access my Google Chrome passwords?

[Steven P. Administrators]

One thing that makes me stick with a browser is the hassle of moving all login and passwords over, I even make use of the "suggest passwords" thingy in Chrome now, so imagine my surprise when I signed up to a webshop today using Google Chrome and while looking to see if Microsoft's Edge dev had updated to the latest version (it had) I noticed that the webshops account details including the password are right there in the settings  too?

 

 

I have my Microsoft account associated with the Edge dev profile, and my Chrome browser profile is my Neowin email address, so these are not even the same.

 

Looking in Google search is no help because I get a bunch of results relating to the old (Spartan) Microsoft Edge browser (and how to import or export passwords to Chrome).

 

It seems like a huge breach to me if apps can access Chrome's password's store?

 

Note: I hardly ever use Edge-dev, which makes it even more surprising that it is maintaining Google Chrome's passwords.

[Steven P. Administrators]

I found this in the settings, but this appears to require a user intervention.

 

 

The triangle warning is just something saying that previously saved passwords for the same site will be overwritten by the imported data.

 

 

[chromeshock]

I'm shocked too. I just downloaded  edge browse just to see how it changed itself using chromium project. When It showed me a popup to import bookmarks, forms and passwords, I was sure it will ask me for the password phrase which I used with chrome browser to encrypt the passwords. To my shock it didn't. And it simply copied all my passwords like a text file from chrome. And chrome isn't even running.

There are several hundreds of chromium based browsers out there. 

 

This is A SECURITY BREACH. I'm not sure who else noticed this. 

Or am I missing something?

  On 03/06/2019 at 21:15, Steven P. said:

I found this in the settings, but this appears to require a user intervention.

 

 

The triangle warning is just something saying that previously saved passwords for the same site will be overwritten by the imported data.

 

 

Expand  

 

[Forum staff Moderator]

This topic was automatically locked because it did not receive any replies for a year. If you want to have this topic reopened

• please contact any staff moderator or
• report the first post of the topic with the reason why it should be reopened.

Thank you.