Keep your saved passwords private in Microsoft Edge

Summary

Microsoft Edge helps protect your saved passwords by requiring authentication before autofill. To simplify the security experience and align with modern device protections, Custom Primary Password (CPP) is being retired and replaced with device-based authentication, such as Windows Hello, macOS Touch ID, or your system sign-in.

This article explains what’s changing, how it affects you, and what you can do to prepare.

What’s changing

The Custom Primary Password option in Microsoft Edge Password Manager is being deprecated and removed in phases.

• New users will no longer see the Custom Primary Password option.

• Existing users who currently use Custom Primary Password will be guided to switch to device sign-in authentication.

• After June 04, 2026, users who haven’t switched will be automatically moved to device-based authentication.

How this change affects you

If you never enabled Custom Primary Password:

• No action needed.

• You may notice a simplified Password Manager settings page.

If you currently use Custom Primary Password:

• You’ll see in-product notifications explaining that the feature is being retired.

• You’ll have time to switch to device sign-in authentication before the change is enforced.

• If no action is taken by the end of the June 04, 2026, Edge will automatically switch you to device-based authentication.

If you use Microsoft Edge in an enterprise environment:

• Enterprise users will receive the same in-product guidance.

• Administrative policies will mark Custom Primary Password as obsolete, with updated policy descriptions explaining the change.

What you should do

Switch to device-based authentication (recommended)

Device-based authentication protects your saved passwords using your operating system’s built-in security, such as:

• Windows Hello

• macOS Touch ID

• Your device sign-in password

To switch authentication methods:

1. Open Edge browser, select Settings and more  in the upper right corner of your browser window. 

2. Select Settings > Passwords and autofill > Microsoft Password Manager.

3. Select More settings.

4. Ensure Autofill passwords and passkeys toggle is enabled.

5. Select the option Prompt for the device sign-in options before viewing or filling website password.

6. Authenticate using your device credentials.

Once enabled, Edge will require device authentication before auto filling saved passwords.

What you’ll see during the transition

During the deprecation period, Edge will show reminders in places where Custom Primary Password is used, including:

• The Passwords and autofill settings page.

• Dialogs for creating, changing, or removing a custom password

• Autofill authentication prompts

These messages explain:

• That Custom Primary Password is being retired

• When the change will take effect

• How to switch to a supported alternative

After June 04, 2026, the Custom Primary Password option will be removed, and device authentication will be enforced automatically.