Where did you install Firefox from? Help Mozilla uncover 3rd party websites that offer problematic Firefox installation by taking part in our campaign. There will be swag, and you'll be featured in our blog if you manage to report at least 10 valid reports!

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

Session key

  • 1 reply
  • 0 have this problem
  • 1 view
  • Last reply by cor-el

kwgm
kwgm
more options

1. Does Firefox automatically save a NEW session key with each new session? I have Firefox remembering my site passwords. I'm concerned about the prevention of session hijacking.

Thank you.

1. Does Firefox automatically save a NEW session key with each new session? I have Firefox remembering my site passwords. I'm concerned about the prevention of session hijacking. Thank you.

All Replies (1)

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

A session ID is usually stored in a cookie, so if this cookie doesn't expire and you keep this cookie then you can continue this session.

These steps make a website recognize and remember you:

  • create a cookie allow exception with the proper protocol (https:// or http://) to make a website remember you

You can check that you aren't clearing important cookies.

  • using "Delete cookies and site data when Firefox is closed" to clear cookies keeps cookies with an allow exception
    in 102+ version toggling this setting makes changes to the "Clear history when Firefox closes" settings and those settings prevail
  • using "Clear history when Firefox closes" in Firefox 102+ honors exceptions and keeps cookies with an allow exception, previous versions removed all cookies

Exceptions rely on keeping the "Site settings".

  • clearing "Site settings" clears exceptions for cookies, images, pop-up windows, and software installation and exceptions for passwords and other website specific data
  • Settings -> Privacy & Security
    Cookies and Site Data: "Manage Exceptions"
  • Settings -> Privacy & Security
    Firefox will: "Use custom settings for history":
    [X] "Clear history when Firefox closes" -> Settings