What are remembered browsers or persistent sessions?¶
A remembered browser retains session material after the browser window closes, allowing later cloud access without repeating the full interactive sign-in. The remembered state belongs to a browser profile and provider policy, not necessarily to one continuing human user.
Closing the window need not end the credential¶
Dave selects “stay signed in” on a shared Northstar laptop at 17:20. The browser stores a persistent cookie. The window closes at 17:45; after restart, the same profile opens SharePoint at 08:06 without a new password prompt.
Join provider and browser records¶
Preserve the original authentication, persistent-session policy, session or correlation identifiers, later resource events, and expiry, sign-out or revocation. On the device, browser-profile timestamps, cookies and account state may help connect the continuing route, but opening the profile can update it or trigger synchronisation.
A shared workstation, unattended device or remote-control session may allow another person to use the remembered state. Stolen session material may be replayed elsewhere. Test those explanations against device and network evidence rather than inferring the operator from a familiar browser label.
Microsoft browser persistence - checked 2 September 2026
Microsoft Entra describes a persistent browser session as one that remains signed in after the browser closes and reopens. Current Conditional Access controls can govern browser persistence and sign-in frequency; applications can also maintain their own sessions.
The point to remember
A persistent browser session explains later access without a fresh login. Trace the stored credential to its creation and policy, then establish who could use that browser profile.
