Microsoft Edge Security Features Explained: Protecting Your Online Activity

What Happens When Edge Security Features Are On?

With these features active, Edge acts without asking you. It blocks dangerous websites automatically and stops trackers from following your activity. It shows a full-page warning when a site is known for phishing or malware.

Most of this is on by default. The steps below show you how to check that it is on, and how to tune the settings ⚙️ that involve a trade-off.

Understanding Microsoft Edge’s Main Security Features

Edge has a broad set of security features, and they work as layers. If one layer misses a threat, another may catch it. The most important ones are covered below.

SmartScreen: Your First Line of Defense

Microsoft Defender SmartScreen is Edge's built-in defense system. It checks websites and downloads against a list of reported unsafe sites. If you try to open a dangerous page or download a risky file, SmartScreen blocks it. That stops malware and phishing attempts before they can harm your computer.

How SmartScreen Works

When you visit a website or download a file, SmartScreen checks the address and the file's signature against Microsoft's online service. That service holds information about millions of websites and files, including ones known to be unsafe. SmartScreen works in three ways:

• Phishing Protection: SmartScreen finds websites that imitate real sites to steal your login information.
• Malware Protection: It finds and blocks downloads that are known to contain harmful software.
• Reputation-Based Filtering: It rates how safe a website or download is. A new or rarely seen file can get a warning even if it is not on a known-bad list.

Turning SmartScreen On or Off

SmartScreen is on by default, and that is the recommended setting. To confirm it is still on:

1. Open Microsoft Edge.
2. Click the three dots (...) in the top-right corner to open the Settings and more menu.
3. Select Settings. A settings page opens in a new tab.
4. In the menu on the left, click Privacy, search, and services.
5. Scroll down to the Security section.
6. Find the Microsoft Defender SmartScreen option and make sure its switch is set to On. A blue switch means it is on.

Your administrator has set the value through policy, and you will need to ask them to change it.

Why would you change this? Most people should leave SmartScreen on. Turning it off greatly increases your risk of running into malware or phishing scams. Only very experienced users who fully understand the risks and have other protection in place should consider it, and even then it is usually a bad idea. If you switch it off to test something, switch it back on afterwards with the same steps.

Tracking Prevention: Keeping Trackers Away

Tracking Prevention blocks online trackers from following your browsing habits across different websites without your permission. You can choose between Basic, Balanced, and Strict levels. Each level blocks a different amount of third-party data collection.

Tracking Prevention Levels

Edge offers three levels of tracking prevention:

• Basic: Blocks some trackers that are known to be harmful or that collect your information across multiple websites.
• Balanced: This is the default. It blocks more trackers than Basic, including those that serve targeted ads, but it tries not to break how websites work.
• Strict: Blocks most trackers. This gives the highest level of privacy but can make some websites display or work incorrectly.

How to Change Tracking Prevention Settings

Pick the level that gives you the privacy you want without breaking the sites you use. To change it:

1. Open Microsoft Edge.
2. Click the three dots (...) in the top-right corner.
3. Select Settings.
4. In the menu on the left, click Privacy, search, and services.
5. Under the Privacy section, find Tracking prevention. Make sure it is turned on.
6. Click the option for your preferred level: Basic, Balanced, or Strict. The selected level is highlighted.

The change applies right away. Reload any open tabs to see the effect. If a site breaks after you move to Strict, go back to Balanced.

What happens when done? Balanced blocks many trackers used for ads or profiling across sites. Strict blocks almost all of them, which maximizes privacy but can affect how some sites work. Basic gives the least protection and blocks only known harmful trackers.

Password Management: Safely Storing Your Login Details

The Microsoft Edge password manager stores your usernames and passwords so you do not have to remember them. It fills in your login details on websites where you have saved them. It can also generate strong, unique passwords when you create new accounts, which limits the damage from a data leak.

How Edge Password Manager Works

• Password Saving: When you log in to a website, Edge asks if you want to save your username and password.
• Password Generation: When you create a new account, Edge can suggest a strong, unique password.
• Autofill: Once a login is saved, Edge can fill in your details on that website.
• Security Check: Edge can check your saved passwords for any that are weak, reused, or have appeared in known data leaks.

Managing Your Saved Passwords

You can view, change, or delete saved passwords at any time. To open the list:

1. Open Microsoft Edge.
2. Click the three dots (...) in the top-right corner.
3. Select Settings.
4. In the menu on the left, click Profiles.
5. Click Passwords. Your saved logins are listed on this page.

On some Edge builds the page is labelled slightly differently, for example with "autofill" in the name. The saved logins and the settings below are in the same place.

On this page you can manage each saved login:

• Click the eye icon to reveal a password. Windows may ask you to confirm your identity first, such as with your PIN or Windows Hello.
• Click Edit to change the saved entry.
• Click the three dots next to an entry to delete it.

The switch next to Offer to save passwords turns password saving on or off. Turning it off does not delete logins you have already saved.

Edge then lists any logins that are weak, reused, or found in a known leak. Change those first, starting with your email and banking accounts.

The password manager helps you avoid weak or reused passwords. When the same password is used on several sites, a breach at one site puts all those accounts at risk. The Edge password generator creates a different strong password for each site, and the security check warns you about problems.

InPrivate Browsing: Temporary Privacy

InPrivate browsing opens a separate window where Edge does not save your browsing history, temporary files, or cookies. When you close the InPrivate window, the session data is removed from the device. Other people who share your computer cannot see what you did.

How to Use InPrivate Browsing

To start an InPrivate session:

1. Open Microsoft Edge.
2. Click the three dots (...) in the top-right corner.
3. Select New InPrivate window.

You can also press Ctrl+Shift+N in Edge to open the same window.

A new window opens with an InPrivate badge. It typically uses a dark theme together with the InPrivate logo, so you can tell it apart from a normal window.

What happens when done? When you close the InPrivate window, the session is cleared from your local history. Your search history, cookies, and temporary files from that session are deleted. Files you downloaded stay on your disk, because closing the window does not delete them. Extensions are also off in InPrivate windows unless you allow them.

InPrivate browsing does not make you anonymous online. Your internet provider, your employer, or the websites you visit can still see your activity.

Advanced Security Settings in Microsoft Edge

Beyond the main features, Edge gives you finer control over security and privacy. The settings below cover the more detailed options.

Enhanced Security Mode: A Stronger Defense

Enhanced Security Mode applies stricter safety rules to websites. It protects your computer from memory-based exploits and malware. It uses site isolation to run unfamiliar web pages in separate, protected processes. That makes it much harder for malicious code to attack your system.

How Enhanced Security Mode Works

Site isolation is a security technique that runs websites in separate, protected processes. A compromised website stays contained, which reduces the risk to the computer and to your other browser tabs. Enhanced Security Mode also puts tighter limits on how harmful code can run.

Turning On Enhanced Security Mode

You can choose between Balanced and Strict. Balanced is recommended for general use. To turn it on:

1. Open Microsoft Edge.
2. Click the three dots (...) in the top-right corner.
3. Select Settings.
4. In the menu on the left, click Privacy, search, and services.
5. Scroll down to the Security section.
6. Find Enhanced security mode. On some Edge builds the wording is closer to "Enhance your security on the web". If there is a switch, turn it on.
7. Select Balanced (recommended) or Strict.

To undo the change, return to the same place and turn the feature off, or switch from Strict back to Balanced. Reload any open tabs for the new setting to apply.

What happens when done? In Balanced mode, Edge uses enhanced security for most sites. It may relax it for sites you visit often, so they keep working smoothly. In Strict mode, enhanced security applies to all sites. That gives the highest protection, but some websites may perform worse or not work properly. If a site you rely on misbehaves in Strict, go back to Balanced.

Managing Cookies and Site Permissions

Cookie and site permission settings let you control how websites store data on your device and what hardware they can use. You can block third-party cookies. You can also revoke a website's access to your camera, microphone, or location.

Cookie Settings

To manage cookies:

1. Open Microsoft Edge.
2. Click the three dots (...) in the top-right corner.
3. Select Settings.
4. In the menu on the left, click Cookies and site permissions.
5. Under Cookies and data stored, you can:

   • Turn on Allow sites to save and read cookie data to allow cookies. If you turn this off, cookies are blocked and many sites will not keep you signed in.
   • Turn on Block third-party cookies to stop cookies from sites other than the one you are currently visiting.
   • Click See all cookies and site data to view, search, edit, or delete individual cookies and stored data.

Blocking third-party cookies is a good middle ground. It cuts cross-site tracking, and most sites still work normally.

Site Permissions Management

To manage site permissions:

1. Follow steps 1 to 4 above to get to Cookies and site permissions.
2. Under All permissions, you can control access for:

   • Camera
   • Microphone
   • Location
   • Notifications
   • And many others.
3. Click a specific permission, for example Location. The settings for that permission open.
4. Here you can:

   • Turn on Ask before accessing so sites must ask for your permission first.
   • Click Add under Allow or Block to set the permission for specific websites.

Controlling data collection and hardware access protects you. Websites cannot gather data they do not need, or use your camera and microphone without permission. Blocking third-party cookies also reduces tracking across websites. To undo a change, return to the same page and reverse the setting or remove the site from the Allow or Block list.

HTTPS-Only Mode: Making Sure Connections are Encrypted

HTTPS-Only Mode makes Edge use encrypted connections to websites whenever possible. It upgrades older, unencrypted HTTP connections to HTTPS automatically. That makes it much harder for someone on the network to intercept the information you send.

How to Turn On HTTPS-Only Mode

To turn it on:

1. Open Microsoft Edge.
2. Click the three dots (...) in the top-right corner.
3. Select Settings.
4. In the menu on the left, click Privacy, search, and services.
5. Scroll down to the Security section.
6. Find Turn on HTTPS-Only Mode and set the switch to On. The label may be worded differently on some Edge versions, for example as an option to switch to more secure connections automatically.

To undo the change, set the same switch to Off.

What happens when done? If you visit a website that only supports HTTP (unencrypted), Edge shows a warning page instead of connecting. This stops you from accidentally sending sensitive information over an insecure connection. If you really must visit a site that does not support HTTPS, you can choose to proceed. Do not enter passwords or payment details on it.

Special Security Tips for Microsoft Edge Users

The settings above cover the basics. The tips below add more protection.

Using Extensions Wisely

Be careful with extensions. A malicious add-on can steal personal data or inject ads into the pages you visit. To stay safe, install add-ons only from the official Microsoft store, and check the permissions they ask for before you add them.

• Source Matters: Only install extensions from the official Microsoft Edge Add-ons store or from trusted developers.
• Permissions Check: Before you install an extension, read the permissions it asks for. Does it really need access to your browsing history or to all website data?
• Regular Review: Check your installed extensions from time to time. To do that, open the Edge menu and choose Extensions, then Manage extensions. Remove any you no longer use or do not recognize.
• Reputable Extensions: Consider well-known security and privacy extensions such as AdBlock Plus, uBlock Origin, or Privacy Badger. They can work alongside Edge's built-in features.

Keeping Your Browser Updated

Keeping Edge updated gives you the latest patches for newly discovered security vulnerabilities. Edge installs updates automatically in the background by default. You can also check manually through the settings menu whenever you want.

Automatic Updates

Updates are automatic, but a manual check takes a few seconds:

1. Open Microsoft Edge.
2. Click the three dots (...) in the top-right corner.
3. Hover over Help and feedback.
4. Click About Microsoft Edge. A page opens that shows your version number.

Edge checks for updates and downloads any it finds. You may then see a Restart button, because the update only takes effect after the browser restarts. Edge normally reopens your tabs afterwards. If the page says Edge is up to date, you have nothing more to do. On a work or school PC, an administrator may control updates, and the check may behave differently.

Browser updates patch holes in your digital armor. Attackers constantly look for weak spots in web browsers, and developers fix them quickly once they are found. If you do not update, those weak spots stay open and make you an easy target.

Using Microsoft Defender SmartScreen with Downloads

Microsoft Defender SmartScreen inspects the files you download in Edge. It compares each file's reputation against known software databases. If a file looks risky, suspicious, or unrecognized, SmartScreen blocks the download automatically to prevent a malware infection.

File reputation is checked at download time. Edge blocks risky or untrusted files and shows a warning explaining why. If you try to open a file flagged as potentially harmful, you get a second warning. Treat that second warning seriously, and do not run a file you do not recognize.

SmartScreen stops harmful downloads by checking files and websites for threats such as viruses and malware. It can catch dangers hidden in downloads that look harmless, which protects your system from malicious software.

Exploring "Children's Mode" (for families)

Children's Mode creates a kid-friendly browsing space with built-in parental controls and simplified settings. It restricts browsing to pre-approved child-friendly websites, blocks adult content, and applies strict privacy settings. Kids can then use the computer more safely.

How to Use Children's Mode

To start it:

1. Open Microsoft Edge.
2. Click your Profile icon in the top-right corner.
3. Select Browse in Children's mode. A simplified browser window opens.

You can set browsing time limits using the built-in timers. To leave Children's Mode, you need to enter your user account password, so a child cannot easily switch back to normal browsing.

Children's Mode protects young users with an approved website list and by blocking adult content. It helps keep children away from inappropriate material and online scams, and makes browsing much safer for them.

Protecting Your Identity with Edge

Your online identity is made up of the information you share and the accounts you sign in to. Edge provides dedicated tools to protect that data.

Password Security Check

As covered in the password management section, the Security Checkup is a useful tool. It checks your saved passwords and warns you about weak entries, reused credentials, and data exposed in known breaches. Run it every so often, and change any password it flags.

Conclusion

Microsoft Edge includes many built-in security features, such as SmartScreen, Tracking Prevention, and HTTPS-Only Mode, to protect your online activity. Used together, they help safeguard your personal data, block malicious websites, and keep your browsing private without extra software.

The built-in password manager and Enhanced Security Mode help you protect your personal data and keep online transactions secure. HTTPS-Only Mode and cookie management give you more control over your data and your online presence.

Keep Edge updated and review these settings now and then. Several protective layers run continuously in the browser to keep your information secure, and secure browsing by individual users also contributes to a safer online environment for everyone.