Password is no safe in edge for ubuntu i

Passwords shown in Microsoft Edge on Ubuntu are still protected, even if a system password prompt does not appear when viewing them.

Microsoft Edge stores saved passwords encrypted on disk using AES. The encryption key is stored in an OS-provided secure storage area (on Linux, Gnome Keyring or KWallet). This design is called local data encryption. Passwords, credit card numbers, and cookies are encrypted when saved and can only be accessed when the current OS user is logged in.

If an attacker already has access as the same logged-in user (for example, malware running under that account), that attacker can do anything that user can do, including viewing passwords in the browser. In that situation, adding an extra prompt in Edge (such as a system password) does not meaningfully increase security, because the attacker already has the same level of access as the user.

To increase security on Ubuntu:

• Use a strong login password for the Linux user account.
• Lock the screen when away from the device.
• Ensure Gnome Keyring or KWallet is configured to lock when the session is locked or logged out.
• Keep the system free of malware and restrict physical access.

Edge’s threat model assumes that once someone is logged in as the user, they are trusted to access that user’s data. The main protection is at the OS account and keyring level, not an additional prompt inside the browser.

References:

• Microsoft Edge password manager security