Major security issue Firefox 63.0.3 logins and passwords no longer log out, even on re-start/reboot
Since upgrading to FF 63.0.3 (on three machines), Firefox will no longer log out of password-protected websites when browser is closed/restarted. Even on a clean shut down/reboot of the entire system, all https websites remain logged in. This is a major security issue.
Suggested solutions I have tried:
1. Refresh Firefox
2. Safe mode restart with all addons/extensions disabled
3. Complete uninstall/reinstall of Firefox
4. Adding https sites (such as Yahoo mail) to 'Exceptions - Saved Logins'
5 Changing 'about:config browser.sessionstore.privacy_level from 0 to 1 (and 2)
All have failed.
All three machines:
Browser: FF 63.0.3 System: Windows 8.1 Pro
Update: One of the three Windows 8.1 Pro machines Firefox browsers is functioning correctly (automatic log out on any session re-start). The other two persist with the security error.
All Replies (3)
Update 12/5: the correctly functioning FF 63.0.3 has now reverted back to the reported error above.
Does that mean the issue is resolved?
Firefox will not log out of any site unless you tell it to.
This will have Firefox log out of all sites when the browser closes;
Type about:preferences#privacy<enter> in the address bar. The button next to History, select Use Custom Settings.
Turn off Always Use Private Browsing Mode Turn on Remember My Browsing And Download History At the bottom of the page, turn on Clear History When Firefox Closes. At the far right, press the Settings button. Turn on Cache and Form And Search History.
Also turn off Active Logins.
If clearing cookies didn't help then It is possible that the cookies.sqlite file in the Firefox profile folder that stores the cookies got corrupted.
- rename/remove cookies.sqlite (cookies.sqlite.old) and if present delete cookies.sqlite-shm and cookies.sqlite-wal in the Firefox profile folder with Firefox closed in case cookies.sqlite got corrupted.
You can use the button on the "Help -> Troubleshooting Information" (about:support) page to go to the current Firefox profile folder or use the about:profiles page.
- Help -> Troubleshooting Information -> Profile Directory:
Windows: Show Folder; Linux: Open Directory; Mac: Show in Finder - http://kb.mozillazine.org/Profile_folder_-_Firefox
You can create a new profile to test if your current profile is causing the problem.
See "Creating a profile":
- https://support.mozilla.org/en-US/kb/profile-manager-create-and-remove-firefox-profiles
- http://kb.mozillazine.org/Standard_diagnostic_-_Firefox#Profile_issues
If the new profile works then you can transfer files from a previously used profile to the new profile, but be cautious not to copy corrupted files to avoid carrying over problems.