Advice Request What is your opinion about the "sign in with device password" feature in Edge and Firefox password managers?

[oldschool]

Edge browser recently got a new feature called "sign in with device password". Firefox has had a similar feature for some time. I realize many users don't store passwords in the browser, but how does this feature improve security in auto-filling passwords? Or does it?
M$ says this about the feature:
Additional privacy for your saved passwords

 

[SpiderWeb]

I think Firefox has an option to unlock autofilling credit cards with my touch ID/fingerprint. I like that. I never trust my browser with any other passwords and super critical passwords are not stored anywhere not even my password manager.

 

[blackice]

I think Firefox has an option to unlock autofilling credit cards with my touch ID/fingerprint. I like that. I never trust my browser with any other passwords and super critical passwords are not stored anywhere not even my password manager.

There is one password I don’t store in my password manager. It’s the one to the account that would change the passwords to all the accounts in the manager. They all also have 2-factor, as does the master account. It’s a tangled web. Logging into anything is a bit of a hassle.

To the original question I would say it’s an intriguing option. I’d be interested to see how people like it. I prefer my current password manager personally.

 

[Andy Ful]

...
I realize many users don't store passwords in the browser, but how does this feature improve security in auto-filling passwords? Or does it?

After applying this setting, the auto-fill feature will require a device password that is used to sign in when starting Windows. It is a kind of protection against other people when the user leaves the computer temporarily (without Windows sign-off) to drink a coffee, etc. It can also protect against malicious sites that might try to steal credentials. Anyway, forcing users to sign in with their own user accounts on the device is better protection.

Important: This setting can't guarantee protection against malicious hackers or protect you against a motivated attacker. Malware or keyloggers installed on your device will still be able to read your passwords and attackers who can access your device can also turn off this setting if they know the device password.