1.151 WN10-CC-000245

Information

The password manager function in the Edge browser must be disabled.

GROUP ID: V-220843
RULE ID: SV-220843r991589

Passwords save locally for re-use when browsing may be subject to compromise. Disabling the Edge password manager will prevent this for the browser.

Solution

Configure the policy value for

Computer Configuration >> Administrative Templates >> Windows Components >> Microsoft Edge >> 'Configure Password Manager'

to 'Disabled'.

See Also

https://workbench.cisecurity.org/benchmarks/23869