Firefox 54.0.1 isn't forgetting logins despite being set to do so. Help?
Since updating to Firefox 54.0.1, I've noticed that every time I close Firefox and reopen it, I'm still logged into Facebook, YouTube and Outlook, despite my settings being set to never remember logins. This is a serious privacy issue and needs fixing, any help?
Modified by ProfessorPlum
All Replies (2)
If you leave tabs open and restore them automatically on the next start then Firefox stores the cookies including cookies that authenticate you in sessionstore.js as part of the session data.
You can set browser.sessionstore.privacy_level to 2 on the about:config page to disable saving cookies as part of session data.
I think there are two different things going on here.
(1) Firefox's Password Manager
The checkbox on the Security panel of the Options/Preferences page controls whether Firefox's Password Manager offers to remember website logins and fill them in for you.
(2) Cookies
By default, Firefox will honor the "lifetime" that websites request for cookies they set. When you log into a site, often you'll see a checkbox to stay logged in. The website will then set either a persistent cookie (to keep you logged in) or a session-only cookie (which expires when you exit Firefox).
If you want to change your default cookie lifetime, you can do that on the Privacy panel of the Options/Preferences page.
- Windows: "3-bar" menu button (or Tools menu) > Options
- Mac: "3-bar" menu button (or Firefox menu) > Preferences
- Linux: "3-bar" menu button (or Edit menu) > Preferences
In the left column, click Privacy. Then on the right side, if the selector is set to "Firefox will: Remember history" change that to "Firefox will: Use custom settings for history to reveal the detailed settings.
The under cookies, change from "Keep until: they expire" to "Keep until: I close Firefox".
Additional Notes
(A) There may be sites where you WANT a persistent cookie. You can allow that using the Permissions panel of the Page Info dialog while you're on the site. Either:
- right-click a blank area of the page and choose View Page Info > Permissions
- (menu bar) Tools menu > Page Info > Permissions
- click the padlock or "i" icon to the left of the site address, then the ">" icon, then More Information > Permissions
Scroll down to "Set Cookies" and uncheck the "Use default" box, and then select the "Allow" permission.
(B) As cor-el mentioned, using the startup setting of automatically restoring your previous session windows and tabs will extend your session. In that case, it's safest to log out of sites to make sure no one could resume your session.