Important Notice: We're experiencing email notification issues. If you've posted a question in the community forums recently, please check your profile manually for responses while we're working to fix this.

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Əgər kömək lazımdırsa lütfən yeni sual verin.

What type of encryption does the built-in password manager use?

  • 1 cavab
  • 1 has this problem
  • 47 views
  • Last reply by TyDraniu

ouranos196
ouranos196
more options

I've been trying to know how secure is the built-in password manager in Firefox. On the web, some say it uses SHA-256, others SHA-1 with one iteration (wich would be awful!!!). If it's not secure enough, I will use another password manager.

I've been trying to know how secure is the built-in password manager in Firefox. On the web, some say it uses SHA-256, others SHA-1 with one iteration (wich would be awful!!!). If it's not secure enough, I will use another password manager.

Chosen solution

When using a master password, passwords are encrypted using Triple DES Encryption in CBC mode. This is OK.

The problem is, master password is encrypted using SHA-1 with 1 iteration. This is quite weak (see bug 524403).

You still can use another pass manager.

Read this answer in context 👍 1

All Replies (1)

TyDraniu
TyDraniu
  • Top 25 Contributor
more options

Seçilmiş Həll

When using a master password, passwords are encrypted using Triple DES Encryption in CBC mode. This is OK.

The problem is, master password is encrypted using SHA-1 with 1 iteration. This is quite weak (see bug 524403).

You still can use another pass manager.

Modified by TyDraniu