Microsoft Password Manager

Yes, Microsoft Edge auto-fills your password across all your devices where you're signed in and syncing passwords.

Passwords created with Microsoft Edge’s Password Generator are automatically saved to your account for easy access. To view them, go to icon Settings ▸ Passwords and autofill ▸ Microsoft Password Manager, then scroll down to see your saved passwords.

When you open a web page that contains a sign-up form or a change password field, Microsoft Edge activates Password Generator. When you select the password field, Password Generator suggests a strong password in a drop-down menu. You just need to select the suggested password and submit it to the website. That’s it. The suggested password is now saved in your browser and will be auto-filled the next time you come to the website. It will also be available on all your devices where you're signed in and syncing passwords.

If you don’t find the Password Generator drop-down working as expected on any website, right-click or press and hold on the password field and select Suggest strong password; the Password Generator drop-down will appear.

To manage Password Generator, go to icon Settings ▸ Passwords and autofill ▸ Microsoft Password Manager ▸ More settings. Use the toggle labeled Suggest strong passwords to turn the feature on or off.

Note: You must be signed in and syncing passwords for Password Generator to work. If you're signed in but not syncing, turn on password sync first.

Strong data protection is more important than ever in today’s evolving security landscape—when a site or app gets hacked, your username and password could end up public on the dark web. If you reuse that password on other sites, attackers may try it elsewhere. Password Monitor helps you catch these risks early and protect your other accounts.

Once enabled, Edge securely checks your saved credentials against a constantly updated database of leaked credentials. The check is encrypted and private—only you can see which passwords are flagged. Edge does not store or send your plain-text passwords.

On first enablement, all saved passwords are scanned at once. After that, Edge scans each credential automatically whenever it's saved or auto-filled. You can also run a manual scan anytime using the Password security check option in Microsoft Password Manager within Edge’s Passwords and autofill section.

Flagged credentials appear under the Password security check page. You can choose to change the password immediately, dismiss the alert if the account is no longer in use, or add it to an ignore list. For supported sites, clicking Change opens the site’s change password page directly. For sites that are not supported, users are advised to go to the website themselves and change it.

Only passwords you’ve saved in Microsoft Edge are monitored. Also, Password Monitor relies on known leak databases—very new leaks or credentials not yet in those databases might not be detected. That’s why using unique, strong passwords for every account remains important.

It depends. If you’re signed in to Microsoft Edge and syncing your passwords, Password Monitor is automatically enabled. If you’re not signed in, not syncing, or using a managed device, you may need to turn it on yourself.

To check your settings, go to icon Settings ▸ Passwords and autofill ▸ Microsoft Password Manager ▸ More settings ▸ and make sure Scan passwords for leaks is switched on (the toggle will be to the right and highlighted in blue).

You’re in control—you can dismiss or ignore alerts for old or unused accounts, so notifications stay meaningful and relevant.

Yes. You can disable the feature at any time in icon Settings ▸ Passwords and autofill ▸ Microsoft Password Manager ▸ More Settings ▸Scan passwords for leaks.

No. Password Monitor is one of several layers of protection. Using unique, strong passwords (or Passkeys), enabling two‑factor authentication, and practicing safe browsing habits all help maximize your account security. Learn more about how to protect your online accounts using Password Monitor.

To check the health of your saved passwords—such as whether any are reused or considered weak—start by running a password scan with Password Monitor. In Microsoft Edge, go to icon Settings ▸ Passwords and autofill ▸ Microsoft Password Manager ▸ Password security check, then select Check to begin. Once the scan is complete, you’ll see which passwords are flagged as "Reused" or "Weak", so you can take action to strengthen your security.

If Password Monitor identifies a password that may need updating, simply select the Change icon next to the website. You’ll be directed to the site to log in and update your password. For added protection, you can use the built-in Password Generator in Microsoft Edge to create a strong, unique password suggestion during the update process.