By default, password generation is available. The Password Generator ( Allow users to get a strong password suggestion whenever they are creating an account online), also introduced in Microsoft Edge 88, helps generate strong passwords on the user’s behalf. This setting does require end-user consent, so even if set to Enabled the end user must acknowledge its use before the setting goes into effect. Note: If your organization supports MSA users and they are allowed to sync data then this feature will be enabled automatically. More details on password monitoring can be found here. The Password Monitor ( Allow users to be alerted if their passwords are found to be unsafe) introduced in version 88 monitors for the compromise of users’ credentials. Two existing settings, “ Browser sign-in settings” and “ Force synchronization of browser data and do not show the sync consent prompt”, allow you to control whether users are signed into the browser and able to benefit from improvements to the password manager that require sync. Note: Enhanced password management features do require connectivity, meaning an Azure Active Directory (AAD) or Microsoft Account (MSA) must be used. We will highlight what we feel are compelling reasons for Enterprises to consider leaving the Password Manager enabled and configuring additional settings that increase the security value of the Password Manager. Each organization needs to make an informed decision about how they configure the password manager based on their specific environment.īy default, Microsoft Edge’s Password Manager is enabled.
We are now removing that recommendation and moving this setting to Not Configured based on the availability of several new features that alter the security tradeoffs introduced by Microsoft Edge’s improved Password Manager. Previously, the Microsoft Edge security baseline has called for disabling the built-in password manager (Enable saving passwords to the password manager). This release also brings some exciting password management changes that we have been discussing for quite some time. Microsoft Edge’s Password Manager (Removed) You can download the new package from the Security Compliance Toolkit. A new Microsoft Edge security baseline package was just released to the Download Center. We have reviewed the settings in Microsoft Edge version 114 and updated our guidance with the removal of two settings. We are pleased to announce the enterprise-ready release of the security baseline for Microsoft Edge version 114!
0 kommentar(er)
