Microsoft has removed the custom primary password (master password) feature from Microsoft Edge as of June 4, 2026. Users who previously activated this feature will now need to use device-based authentication methods to access their saved passwords.
This includes options like Windows Hello or the device’s standard operating system login with PIN, fingerprint, or facial recognition. The change was first introduced with the release of Edge version 145 and is in line with Microsoft’s broader shift toward passwordless authentication.
This change also includes the phaseout of SMS two-factor authentication announced last month for personal Microsoft accounts.
What changed in Microsoft Edge and why was the custom primary password removed?
The Custom Primary Password feature allowed users to set a master password to secure access to their saved passwords in Edge. Microsoft has replaced this with device-based authentication, so access now depends on the login method used to secure the device.
Microsoft announced: “On June 4, custom primary passwords will be completely removed for users who opt in. After this date, Microsoft Edge will automatically use device-based authentication, such as Windows Hello, device password, or OS-level authentication, to protect saved passwords.”
Microsoft states that Windows Hello provides a higher level of security than a custom master password. While a master password can be compromised if a third party discovers it, providing access to all saved credentials, device-based authentication relies on hardware-level biometrics or a device PIN that cannot be accessed remotely. Windows Hello also does not transmit authentication data to the cloud.
Windows Hello limitations and what Edge users should do now
There is a known limitation of Windows Hello’s facial recognition feature that was introduced in 2025, which requires both an IR sensor and a webcam to see the user’s face for sign-in. In low light or dark conditions, this may prevent authentication from working.
Microsoft confirmed that this change was intentional, not a bug. Users who cannot use facial recognition can resort to fingerprint authentication or a device PIN within Windows Hello.
Users who relied on custom primary passwords in Edge no longer need to manage a separate master password. Now, passwords saved in Edge are protected by the same authentication that is used to secure the device.
Those who prefer stronger separation between their browser password vault and their OS login may want to consider a dedicated third-party password manager.
Such managers store credentials inside an encrypted vault that is separate from device authentication. This change does not affect passwords already saved in Edge. Existing credentials remain accessible through the new device-based authentication method.
Thanks for being a Ghax reader. The post Microsoft Edge removes master password feature, switches to Windows Hello for saved password access appeared first on gHacks.
