Enable site isolation for every site
This computer-level Microsoft Edge policy is represented by a `REG_DWORD` value.
since 0.9.8.11
Purpose
Show registry keys (1)
HKLM\Software\Policies\Microsoft\Edge\SitePerProcess
This computer-level Microsoft Edge policy is represented by a REG_DWORD value. A value of 1 enforces the browser's default site-isolation behavior, under which content from different sites runs in separate renderer processes. Users cannot opt out through experimental Edge settings.
The policy does not enable a feature that would otherwise normally be inactive. Site isolation is already the default behavior in Microsoft Edge; the policy prevents users from overriding that behavior.
Notes
Security
Separate renderer processes provide an additional security boundary between sites. In particular, this reduces the risk that a compromised site could use a renderer vulnerability to access content belonging to another site.
The policy does not provide complete isolation of the browser or operating system. It isolates sites and does not necessarily place every origin within the same site in a separate process. Other Edge policies cover finer-grained, origin-based isolation.
Notes
The policy is supported on Microsoft Edge for Windows version 77 and later. It is not applied on a per-profile basis and cannot be configured as a recommended policy. A browser restart is required before a changed value takes effect.
Microsoft documentation
Microsoft Learn: SitePerProcess – Enable site isolation for every site
Microsoft Research: Timing-Based Browsing Privacy Vulnerabilities Via Site Isolation