Microsoft will block password-based logins for its Edge browser's password manager starting tomorrow. Users must authenticate using Windows Hello instead, marking a major shift in how the browser handles saved credentials.
The change applies to Edge's built-in password manager, which previously allowed users to autofill passwords with a master password. Now biometric verification such as fingerprint or facial recognition, or a PIN will be required.
The Shift to Passwordless Authentication
Microsoft's move aligns with a broader industry push toward passwordless security. Windows Hello has been available for several years but was optional for Edge's password manager. By making it mandatory, Microsoft aims to reduce phishing and credential theft risks.
Users who do not have Windows Hello configured will need to set it up before they can access saved passwords. The change takes effect with the next Edge update and applies to all Windows 10 and Windows 11 devices.
Why This Matters
Password managers have become essential tools for managing dozens of online accounts. But they also present a single point of failure if the master password is compromised. Requiring biometric or PIN-based verification adds a second layer of protection that is harder to steal or guess.
This change directly affects millions of Edge users who rely on the browser's password manager. It also signals that Microsoft is doubling down on Windows Hello as a core authentication method, potentially pushing other services to follow suit. For users, the trade-off is improved security against credential theft at the cost of losing password-based convenience.
What Users Should Do
Users should check that Windows Hello is enabled in their Windows settings. On supported devices, this means registering a fingerprint or setting up facial recognition. Those without biometric hardware can use a PIN as an alternative.
Microsoft recommends updating Edge to the latest version to ensure the transition goes smoothly. Users who prefer password-based authentication may need to consider third-party password managers that still offer that option.
