Master Password Bypassed
I thought of a scenario today. What if I had to get my laptop repaired and provide my Windows admin password to them? So I decided to password-protect Thunderbird using the Master Password option. But found out that when Thunderbird prompts to input the password, I can simply click on 'cancel' a few times and it's gone.. No more prompt to enter the master password and I can use Thunderbird as usual. Now I have to look for another email client unless this issue is FIXED urgently.
모든 댓글 (2)
This is what I'm using:
Thunderbird 78.13.0 (32-bit)
Windows 10 Home 64 Bit 10.0.19042
The Master Password is designed to protect your account passwords from prying eyes if you allow someone else, deliberately or accidentally to use your computer and allow them access to your computer desktop - usually accessed via a User Name password.
Are you saying you can access and view your saved passwords without entering the Master Password after starting up Thunderbird? eg: Start up thunderbird, do not enter Master Password - do that Cancel routine you mention and then: Menu app icon > Options/Preferences > Privacy & Security > Passwords subsection > click on 'Saved Passwords' button > click on 'Show Passwords' button
Can you see the saved passwords or do you get prompted to enter Master Password If you get prompted for Master Password at this point... if you keep doing the cancel do you suddenly get access to view those passwords?
Info: https://support.mozilla.org/en-US/kb/protect-your-thunderbird-passwords-master-password