How to Secure Your Accounts If Quick Assist Exposed Passwords
Question details
The user needs to secure their accounts after a remote support agent navigated to their browser's password manager during a Quick Assist session.

- Product
- Windows Quick Assist
- Device & OS
- Windows
- Scenario
- A remote support session was active, and the agent opened the web browser's saved passwords page, raising privacy concerns.
- Observed behavior
- Saved credentials may have been visually exposed to the remote agent, leading to concerns about unauthorized account access or potential tech support scams.
Check if your web browser prompted you for a Windows PIN or device password when the password manager page was opened; if you didn't enter it, your saved passwords most likely remained masked and secure.
Immediately Secure Your Critical Accounts
Take immediate action to lock down your accounts by changing passwords and terminating active sessions across all devices.
If you suspect that a remote agent had unauthorized access to your unmasked passwords, securing your core accounts (email, banking, Microsoft/Google accounts) is your top priority to prevent financial or identity theft.
Navigate to the security settings of your banking, primary email, and main Microsoft or Google accounts to change your passwords immediately. Use strong, unique passwords for each.
In your account's security or privacy dashboard, locate and click the option to 'Sign out everywhere' or 'Sign out of all devices' to instantly disconnect any unauthorized users.
Turn on two-step verification (2FA) in your account security settings. Choose to receive codes via an Authenticator app or SMS to ensure a password alone isn't enough to access your account.

Review Account Activity and Report Suspicious Behavior
Verify if your accounts have been accessed from unknown locations and report any fraudulent tech support scams.
Enjoy Secure and Private Document Editing with WPS Office
Looking for a safe environment to manage your personal documents securely offline? WPS Office provides a robust, lightweight, and fully compatible alternative to Microsoft Office with built-in local file protection features.
- 1. Download WPS Office: Visit the official WPS website to download the free, lightweight installer for your device.
- 2. Install and setup: Run the setup file and launch the application to start managing your documents locally and securely.
- 3. Encrypt sensitive documents: Use the built-in encryption feature in WPS Writer or Spreadsheets by navigating to Menu > Document Encryption to password-protect files containing private data.

Frequently Asked Questions
Can a remote agent see my saved passwords during a Quick Assist session?
Yes, they can see exactly what is on your screen. However, modern browsers like Edge and Chrome usually require you to enter your Windows PIN or account password before unmasking and displaying the saved passwords in plain text.
How do I know if the Quick Assist agent was a scammer?
Legitimate Microsoft support agents will never ask for your passwords, request payment via gift cards or wire transfers, or ask you to log into your online banking. If any of this occurred, it was likely a tech support scam.
Do I need to change every single saved password?
Start with your most critical accounts, such as your email, banking, and primary device accounts. If you can confirm the passwords were not unmasked because you didn't enter a PIN, your other accounts are likely safe, though changing them adds an extra layer of peace of mind.
Can Quick Assist run in the background without my knowledge?
No, Quick Assist requires you to actively enter a 6-digit security code provided by the agent and grant permission to share your screen. It does not allow unattended access to your computer.




