Foxace661

Microsoft has adopted the Chromium open source project in the development of Microsoft Edge on the desktop to create better web compatibility. This new Microsoft Edge runs on the same Chromium web engine as the Google Chrome browser, offering you best in class web compatibility and performance. With a move to the Chromium-based browser, Microsoft Edge now offers the same level of extension support as Chrome. It features an excellent reading mode with voice support. You can change the text.

This article describes the release cadence and anticipated release schedule for Microsoft Edge.

Release cadence

Microsoft provides four options, called channels, to manage how often Microsoft Edge is updated with new features. The Microsoft Edge team plans to push public updates to the Beta and Stable channels every six weeks. For more information about our channels, their release cycle, and support levels, see the Channel overview.

Note

Starting with Stable channel version 94, Microsoft Edge is moving to a 4-week major release cycle cadence. However, we recognize that enterprise customers who manage complex environments need more time to plan and test Microsoft Edge updates. To help our enterprise customers who need an extended timeline to manage updates, Microsoft Edge will offer an Extended Stable option aligned to a longer, 8-week major release cycle; this option will only be available for customers with managed environments.

Release schedule

Editable daily prophet. The following table lists the planned release dates for the Beta and Stable channels.

Note

Release dates are approximate and might vary based on build status.

Microsoft Edge releases

The following table only tracks and provides information for major releases in both channels.

Release Process

Edge Is Chromium Os

The trigger for Beta and Stable major releases is an equivalent Chromium release.

Progressive rollouts

The date reference (Released/Release week) for the Stable channel references the beginning of the progressive roll out.

We use a progressive rollout model which means that new release availability for any given device could be staggered over upcoming days. For more information, see Progressive rollouts for Microsoft Edge Stable Channel.

Edge Is Chromium Os

See also

What Is Ms Edge Chromium

• 23
• 11
• 2
• 36

Last week, Microsoft Edge has become the second most popular desktop Web browser based on NetMarketShare usage figures. The new, Chromium-powered Edge offers impressive levels of customization and performance, much better compatibility with Web sites. The new browser is available on multiple platforms including older versions of Windows. With Chromium-based Edge quickly gaining momentum, we felt the urge of researching its protected storage.

Microsoft Edge: the Chromium edition

Released on January 15, 2020, the new Microsoft Edge is based on Chromium, an open-source browser project. The new Microsoft Edge is compatible with all supported versions of Windows, and macOS. The new browser replaces the legacy version of Microsoft Edge on Windows 10 PCs.

Microsoft Edge has quickly gained popularity, in April 2020 becoming the second most popular desktop Web browser based on usage. Microsoft Edge gets ahead of Mozilla Firefox, which used to be the second most popular Web browser, and threatens Chrome as a new major competitor.

The new Edge shares its engine with Google Chrome, world’s most popular Web browser. The use of the common engine allows Microsoft to offering a straightforward migration path from Google Chrome. Users can instantly import their favorites, browsing history, open tabs and stored passwords in a few clicks. Today, we’ll look into how Microsoft Edge stores and protects users’ passwords.

Just like Google, Microsoft synchronizes passwords with the cloud. However, unlike Google, Microsoft does not offer users online access to synchronized passwords. As a result, users cannot manage or delete their synchronized passwords from their Microsoft Account without a working instance of Microsoft Edge browser. The new Edge and Edge Legacy apparently use different synchronization mechanisms. The new Edge, once installed, disables Edge Legacy, effectively making the user’s synchronized cloud passwords into a ghost.

Chromium Edge: departure from Windows Data Protection API (DPAPI)

Microsoft Internet Explorer and what is known today as Edge Legacy use Windows Credential Manager to store saved passwords and Web credentials. Windows Credential Manager, in turn, is protected with Microsoft’s Data Protection API (DPAPI) introduced way back in Windows 2000. Windows 10 employs AES-256 to encrypt the passwords. Passwords stored by Edge Legacy could be obtained by acquiring the Web Credentials.

With the release of the Chromium-based Edge browser, Microsoft opted to use Chromium built-in password manager instead of relying on Windows Credential Manager. As a result, the new Microsoft Edge Chromium no longer employs Microsoft DPAPI for protecting stored passwords. Instead, the passwords are protected with industry-standard AES 256 GCM encryption, while DPAPI is only used to protect the vault encryption key. Interestingly, other Web browsers that are based on the Chromium project are using the same encryption scheme. This includes the latest versions of Google Chrome, Opera, and Chromium browser.

By default, Edge Chromium does not protect the encrypted password database with a master password. Instead, Microsoft uses the Data Protection API (DPAPI) to protect the encryption key with the user’s Windows credentials. In turn, DPAPI uses AES-256 to encrypt the encryption key.

In order to access passwords stored in Edge Chromium, one must sign in with the user’s Windows credentials (authenticating with a login and password, PIN code, or Windows Hello) or hijack the active session. As a result, Edge Chromium password vault is covered with the same level of protection as the user’s Windows login.

This, effectively, enables someone who knows the user’s login and password or hijacks the current session to access the stored passwords. This is exactly what we implemented in Elcomsoft Internet Password Breaker.

Using Elcomsoft Internet Password Breaker to extract passwords from Edge Chromium

In order to extract passwords from Web browsers such as Chrome or Microsoft Edge, you must be able to authenticate into the user’s Windows account (with their login and password, Microsoft Account credentials, PIN code or Windows Hello) or hijack an already authenticated session. Note: analyzing a forensic disk image without knowing the user’s password will not provide access to Edge cached passwords due to DPAPI protection.

1. Launch Elcomsoft Internet Password Breaker.
2. Select Web Browsers – Edge Chromium from the menu.
3. In a few seconds, the list of passwords will appear.

Edge Is Chromium Based

Alternatively, you can click on the “Export” button to create a filtered list of all of the user’s passwords. You can than use that list as a custom dictionary in password recovery tools to create smart attacks.

Conclusion

Edge Is Chromium Windows 10

The new Chromium-powered Microsoft Edge is a huge departure from Edge Legacy. The new password protection engine shared with other Chromium-based browsers is vastly different from the DPAPI vault and Credential Manager employed by the legacy Edge. The new password vault offers users the same level of protection as the old Edge, but is significantly easier to extract with third-party tools thanks to the open-source nature of the underlying engine – if and only if one has access to the user’s Windows credentials or an already authenticated session. Cold disk image attacks still remain out of the question unless the user’s Windows password can be recovered.

Edge Is Chromium Reddit

• 23
• 11
• 2
• 36