Where did you install Firefox from? Help Mozilla uncover 3rd party websites that offer problematic Firefox installation by taking part in our campaign. There will be swag, and you'll be featured in our blog if you manage to report at least 10 valid reports!

Avatar for Username

Iskanje po podpori

Izogibajte se prevarantski tehnični podpori. Nikoli vam ne bomo naročili, da pokličete telefonsko številko ali nam pošljete osebne podatke. Sumljivo dejavnost prijavite z gumbom »Prijavi zlorabo«.

Learn More

Ta tema je arhivirana. Postavite prosim novo vprašanje, če potrebujete pomoč.

stored password security in firefox

  • 1 odgovor
  • 1 ima to težavo
  • 7 ogledov
  • Zadnji odgovor od cor-el

stuff3
stuff3
more options

I just installed Brave, and clicked on "Import settings & bookmarks", then chose Firefox from a popup list

Without typing my password, or doing anything else, Brave then instantly imported all of the saved passwords that I had stored in Firefox. I can now view all of my most secret saved passwords of Firefox... in Brave

This makes me wonder, if Brave can instantly import (and display in clear text) all of my Firefox saved passwords, couldn't any other rogue app do exactly the same?

Shouldn't they be stored in an encrypted format, at least?

Am I missing something or are the passwords wide open that Firefox saves?

I just installed Brave, and clicked on "Import settings & bookmarks", then chose Firefox from a popup list Without typing my password, or doing anything else, Brave then instantly imported all of the saved passwords that I had stored in Firefox. I can now view all of my most secret saved passwords of Firefox... in Brave This makes me wonder, if Brave can instantly import (and display in clear text) all of my Firefox saved passwords, couldn't any other rogue app do exactly the same? Shouldn't they be stored in an encrypted format, at least? Am I missing something or are the passwords wide open that Firefox saves?

Vsi odgovori (1)

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

Are you using a primary/master password because if you do not use it then it is quite easy to get the logins because the encryption key is stored in key4.db (SQLite database) ?

If you use a Primary Password then you shouldn't be possible.