Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

I cant believe that the new sync has password sync disabled?!?

  • 3 cavab
  • 2 have this problem
  • 12 views
  • Last reply by cor-el

more options

The "new" sync seems like a giant step backwards towards less security! I would have kept the "old" sync except that it doesn't allow you to add new devices(!). When I updated to the "new" sync I notice that password sync was disable and the ONLY way to sync that was to HAVE NO MASTER PASSWORD!?! How is that a step towards tighter security?

It would be one thing if Mozilla never supported this, then you can excuse it but when you had it previously (with differing Master passwords no less without notable issues) and then disabled it unless you set it to NO PASSWORD then you

A) create a giant security hole on all your devices to do this and B) render the sync useless since most devices MUST have a master password to even approximate security.

You cant even keep the "old" sync if you are happy with it because you would have to downgrade your browser version and even then you couldn't add new devices to it?

Have I missed anything?

Pardon me if I sound frustrated but it is a real kick in the gut to go backwards like this. Now after years of a decent data sharing\password sharing scheme it seems like we are back to looking for third party password sync tools again (Lazarus/keepass/lastpass/roboform) grrrrr!

The "new" sync seems like a giant step backwards towards less security! I would have kept the "old" sync except that it doesn't allow you to add new devices(!). When I updated to the "new" sync I notice that password sync was disable and the ONLY way to sync that was to HAVE NO MASTER PASSWORD!?! How is that a step towards tighter security? It would be one thing if Mozilla never supported this, then you can excuse it but when you had it previously (with differing Master passwords no less without notable issues) and then disabled it unless you set it to NO PASSWORD then you A) create a giant security hole on all your devices to do this and B) render the sync useless since most devices MUST have a master password to even approximate security. You cant even keep the "old" sync if you are happy with it because you would have to downgrade your browser version and even then you couldn't add new devices to it? Have I missed anything? Pardon me if I sound frustrated but it is a real kick in the gut to go backwards like this. Now after years of a decent data sharing\password sharing scheme it seems like we are back to looking for third party password sync tools again (Lazarus/keepass/lastpass/roboform) grrrrr!

All Replies (3)

more options

Just To Say The New Sync Wasn't Made For Security, It Was Made For Easy Use! From Mitch Happy Firefoxing!

more options

mozillausr,

I am very sorry that this limitation with the new version of Sync is affecting the way you use Firefox. It is being addressed by the developers, but unfortunately there is no timetable set for when we can expect it to be remedied.

edit: see cor-el answer about the related Bugs being fixed for Firefox 34

Modified by the-edmeister

more options

See also these bug reports (fixed Firefox 34)

  • bug 973759 - Master password should be protected with stronger cryptography
  • bug 995268 - Firefox Sync and Master Passwords are now mutually exclusive

Please do not comment in bug reports
https://bugzilla.mozilla.org/page.cgi?id=etiquette.html