Modern web browsers act as incredibly capable credential vaults. Microsoft Edge’s built-in password manager will automatically prompt users to save their login details whenever they enter them on a website, syncing those credentials across all devices linked to their Microsoft account. While convenient for personal use, this represents a severe security risk in an enterprise environment. Users saving corporate credentials to their local browser profile (especially if not using a dedicated enterprise vault) exposes the organization to catastrophic data breaches if the endpoint is compromised or the user’s personal Microsoft account is hacked.
This guide explains how to completely disable the Password Manager (Save Passwords) system-wide in Microsoft Edge using Group Policy, forcing users to rely on approved enterprise password management solutions.
Disable Password Manager via Group Policy
To enforce a strict block that prevents the browser from offering to save passwords and locks the setting from user modification, we must deploy an administrative template. Note that this requires Windows 11 Pro, Enterprise, or Education editions.
- Log into Windows 11 with an Administrator account.
- Press the Windows Key + R to open the Run dialogue box.
- Type
gpedit.mscand press Enter to launch the Local Group Policy Editor. - In the left-hand navigation pane, navigate precisely to this path:
Computer Configuration > Administrative Templates > Microsoft Edge > Password manager and protection - In the right-hand pane, locate the policy named Enable saving passwords to the password manager.
- Double-click the policy to open its configuration window.
- Select the radio button next to Disabled.
- Click Apply, then click OK.
Verify the Security Lockdown
Group Policy changes require the browser to read the registry upon its next launch. Close all active instances of Microsoft Edge.
To verify the restriction is active, reopen Microsoft Edge and navigate to a website requiring authentication (e.g., a test webmail portal). Enter dummy credentials and hit submit. The browser will no longer display the familiar “Save password” pop-up in the address bar. Furthermore, if you navigate to edge://settings/passwords, the master toggle for “Offer to save passwords” will be completely greyed out and locked in the Off position, displaying a briefcase icon indicating that the setting is actively managed by your organization’s security policy.