Question Windows 10 saved my passwords without consent

[modeonoff]

Hello, I don't save passwords due to possible cyberattack and I did not opt for saving my passwords when asked. However, Windows knows and often automatically filled the passwords and credit card information fields on Edge. How could this happen? How can I turn it off and erase the saved passwords?

 

[Ralston18]

Look into the Credentials Manager.

 

[Zerk2012]

Hello, I don't save passwords due to possible cyberattack and I did not opt for saving my passwords when asked. However, Windows knows and often automatically filled the passwords and credit card information fields on Edge. How could this happen? How can I turn it off and erase the saved passwords?

Do you also use Chrome if so each time Edge starts it auto imports your Chrome information a great feature from MS that came with one of your updates. ( this was enabled with the update without telling you)

 

[modeonoff]

Look into the Credentials Manager.

First time heard of this. I went there and there is a long list. What shall I do next?

 

[modeonoff]

Do you also use Chrome if so each time Edge starts it auto imports your Chrome information a great feature from MS that came with one of your updates. ( this was enabled with the update without telling you)

I usually use Edge and sometimes Firefox. I am not a fan of Chrome but used it only a few times because two companies asked me to try it when I had difficulty in placing orders.

How do I disable password saving and delete those saved passwords?

For money related matters, is it better to use Edge or Firefox?

 

[Ralston18]

Primarily a Firefox user, then Edge at times. Chrome not installed.

I do not intentionally [edited in] passwords etc. on my computers. Not for any sites - financial or otherwise. No password tools or utilities.

I manually enter passwords and most sites are set up with 2FA of some form or another. I get confirmation texts, emails, or even landline calls. Frequently requiring me to provide a one-time verification code.

I have set up all of my accounts to provide notifications about any on-going financial transactions taking place and requesting my confirmation to proceed as applicable. Especially for large dollar amounts.

= = = =

As for Credential Manager: simply type "Credential Manager" in the small Search Oval usually located in the lower left screen corner. Or access Credential Manager via the Control Panel.

There should be tabs/menus to manage Web Credentials and Windows Credentials. Possibly others depending on what your system may be storing.

It would not and does not surprise me that Windows, apps, websites, etc. may be storing passwords without you explicitly agreeing to do so. Wording can be vague or misleading. Or storage automaticly based on some other consent that was agreed to. EUAs must be carefully read. And also get revised.....

What to do:

Work through the Credential Manager lists: Add, Delete, and Edit as necessary. I would take a screenshot of the lists and use a printed copy of the screenshot as a checklist reference to work through.

And probably screenshots of individual credentials that I would like to have hardcopy information available.

= = = =

For the record, I discovered that my system is storing passwords for Dell, Wife's Apple Fitbit, and HP.... Did not realize or remember agreeing to store those passwords. Do know that that probably happened 2-3 years ago.

One of my rules is to take a careful look at any webpage that comes up especially when doing online financials.

More than once a look alike site or something strange (likely a typo on my part) is presented but still asking for the login and password. I simply exit and start over....

 

[Zerk2012]

I usually use Edge and sometimes Firefox. I am not a fan of Chrome but used it only a few times because two companies asked me to try it when I had difficulty in placing orders.

How do I disable password saving and delete those saved passwords?

For money related matters, is it better to use Edge or Firefox?

I believe edge will get all information from Firefox also.
https://www.reddit.com/r/MicrosoftE...aling_passwords_and_other_settings/?rdt=57226

EDIT I only use Chrome so not sure about other browser settings.

 

[modeonoff]

Primarily a Firefox user, then Edge at times. Chrome not installed.

I do not intentionally [edited in] passwords etc. on my computers. Not for any sites - financial or otherwise. No password tools or utilities.

I manually enter passwords and most sites are set up with 2FA of some form or another. I get confirmation texts, emails, or even landline calls. Frequently requiring me to provide a one-time verification code.

I have set up all of my accounts to provide notifications about any on-going financial transactions taking place and requesting my confirmation to proceed as applicable. Especially for large dollar amounts.

= = = =

As for Credential Manager: simply type "Credential Manager" in the small Search Oval usually located in the lower left screen corner. Or access Credential Manager via the Control Panel.

There should be tabs/menus to manage Web Credentials and Windows Credentials. Possibly others depending on what your system may be storing.

It would not and does not surprise me that Windows, apps, websites, etc. may be storing passwords without you explicitly agreeing to do so. Wording can be vague or misleading. Or storage automaticly based on some other consent that was agreed to. EUAs must be carefully read. And also get revised.....

What to do:

Work through the Credential Manager lists: Add, Delete, and Edit as necessary. I would take a screenshot of the lists and use a printed copy of the screenshot as a checklist reference to work through.

And probably screenshots of individual credentials that I would like to have hardcopy information available.

= = = =

For the record, I discovered that my system is storing passwords for Dell, Wife's Apple Fitbit, and HP.... Did not realize or remember agreeing to store those passwords. Do know that that probably happened 2-3 years ago.

One of my rules is to take a careful look at any webpage that comes up especially when doing online financials.

More than once a look alike site or something strange (likely a typo on my part) is presented but still asking for the login and password. I simply exit and start over....

Thanks for the suggestions. Why taking a screenshot of the lists and individual credentials rather than just delete everything there? If I just delete everything, will I break something? While searching for Credential Manager, I read that it also store some info for Office. If we cannot disable such automatic storing function, does that mean we have to regularly check the Credential Manager?

For online banking, I wonder if using a Mac is more secure. Any idea?

 

[modeonoff]

I believe edge will get all information from Firefox also.
https://www.reddit.com/r/MicrosoftE...aling_passwords_and_other_settings/?rdt=57226

EDIT I only use Chrome so not sure about other browser settings.

Doesn't sound good. Do MacOS and Linux have such problem?

 

[USAFRet]

Doesn't sound good. Do MacOS and Linux have such problem?

I can almost guarantee that somewhere along the way, when Edge/FF/Chrome asked if you wanted to save the login info for a particular site, you clicked Yes.

May have been by accident, but that is likely what happened.

 

[modeonoff]

I can almost guarantee that somewhere along the way, when Edge/FF/Chrome asked if you wanted to save the login info for a particular site, you clicked Yes.

May have been by accident, but that is likely what happened.

Possibly but under Credential Manager, there is a long list of saved information. I don't think I accidentally clicked Yes for that many times.

 

[Ralston18]

One reason for taking a screenshot of the listed credentials is to help determine what may have happened.

E.g., You are unable to login somewhere and realize that when everything was deleted that something indeed got "broke". And may be needed to be added back into Credential Manager."

Use that "long list" as a checklist to investigate, edit, delete, and so forth. You may also discover that something you deleted (and marked accordingly) came back....

= = = =

Not a matter of accidently clicking "Yes". More a matter of being steered into allowing something that, if clearly explained or presented, you would certainly click "No".

You "agree" and somewhere the switch is thrown.

Read the language carefully....

 

[Ralston18]

As for Mac being more "secure" for online banking that could lead to lengthy discussion.

And some hot debates.....

Which has happened many times.

All systems have weaknesses that may be exploited.

 

[USAFRet]

All systems have weaknesses that may be exploited.

The weakest link exists at the keyboard.

 

[Bob.B]

Hello, I don't save passwords due to possible cyberattack and I did not opt for saving my passwords when asked. However, Windows knows and often automatically filled the passwords and credit card information fields on Edge. How could this happen? How can I turn it off and erase the saved passwords?

Ccleaner has a check box for clearing passwords maybe give it a test drive.