{"id":199087,"date":"2022-08-24T04:20:56","date_gmt":"2022-08-24T02:20:56","guid":{"rendered":"http:\/\/sftarticles.wpenginepowered.com\/en\/?p=199087"},"modified":"2025-07-01T20:30:33","modified_gmt":"2025-07-02T03:30:33","slug":"how-to-make-ms-edge-safer-encrypted-client-hello","status":"publish","type":"post","link":"https:\/\/cms-articles.softonic.io\/en\/how-to-make-ms-edge-safer-encrypted-client-hello\/","title":{"rendered":"How to make MS Edge safer by turning on Encrypted Client Hello"},"content":{"rendered":"\n

Most information you send or receive on today\u2019s internet passes through a layer of encryption to make sure it can only be read by the sender and receiver. This task is generally done via an automatic encryption key exchange<\/strong> through a cryptographic protocol in your browser. <\/p>\n\n\n\n

The current most popular key exchange protocol is a handshake called Transport Layer Security (TLS)<\/strong>. By following just a few steps, you can enable the latest TLS extension \u2014 known as Encrypted Client Hello (ECH)<\/strong> \u2014 in your Microsoft Edge browser to make your information even safer<\/strong>.<\/p>\n\n\n

\r\n
\r\n
\r\n
\r\n \"Microsoft\r\n <\/div>\r\n
\r\n Microsoft Edge<\/span>\r\n Download<\/a>\r\n <\/div>\r\n
\r\n <\/path><\/path><\/text><\/svg>\r\n <\/div>\r\n <\/div>\r\n
\r\n <\/span>\r\n <\/div>\r\n
\r\n \r\n <\/div>\r\n <\/a>\r\n <\/div>\r\n<\/div>\n\n\n

  1. Open MS Edge properties<\/h2>\"Microsoft

    Find the shortcut you use to access MS Edge in your Start menu, taskbar, or desktop. Right-click on the shortcut, and select Properties<\/i> from the popup menu.<\/p>\n

    Go to the Shortcut<\/i> tab in the Properties<\/i> box. In the Target<\/i> text box, third from the top, you\u2019ll see the path to the location of your msedge.exe file. It should look something like \u201cC:\\..\\msedge.exe.\u201d<\/p>\n<\/div><\/li>

  2. Update path location and launch<\/h2>\"The

    Don\u2019t change the path itself. Directly after it, add a space followed by –enable-features=EncryptedClientHello<\/i>.<\/p>\n

    Click OK<\/i> at the bottom of the Properties box.<\/p>\n

    Use the shortcut you just modified to launch MS Edge.<\/p>\n<\/div><\/li>

  3. Enable support for HTTPS records in DNS<\/h2>\"Enable

    Before you start browsing, click on Edge\u2019s address bar, and paste edge:\/\/flags\/#dns-https-svcb<\/i>.<\/p>\n

    Edge will display a list of services you can turn on or off. The first one is titled Support for HTTPS records in DNS<\/i>. Click on the drop-down list to the right of that service, and select Enabled<\/i>.<\/p>\n<\/div><\/li>

  4. Enable use DNS https alpn<\/h2>\"Enable

    Click on the address bar again, and type in edge:\/\/flags\/#use-dns-https-svcb-alpn<\/i>. Select Enabled<\/i> next to the option labeled Use DNS https alpn<\/i>.<\/p>\n

    Next, press Alt + F to open Edge\u2019s menu. Click on Settings<\/i> and then Privacy, search, and services<\/i>.<\/p>\n

    Under the Security<\/i> subheading, find the option labeled Use secure DNS to specify how to lookup the network address for websites<\/i>. Click on the toggle switch on the right to enable this. The switch will turn blue.<\/p>\n<\/div><\/li>

  5. Select Cloudfare as service provider and relaunch Edge<\/h2>\"Enable

    Directly below, click the option labeled Choose a service provider<\/i>. In the list of available providers below that, choose Cloudflare<\/i>.<\/p>\n

    Restart the Edge browser. The ECH update is now enabled.<\/p>\n<\/div><\/li>

  6. Use an Encrypted Client Hello checker<\/h2>

    You can check that ECH is working properly in your Edge browser<\/a> by visiting the defo.ie ECH check page at: https:\/\/defo.ie\/ech-check.php<\/i>. Check the status of the SSL ECH parameter. It should read success!<\/i><\/p>\n<\/div><\/li><\/ol><\/div>