Avatar for Username

Vyhľadajte odpoveď

Vyhnite sa podvodom s podporou. Nikdy vás nebudeme žiadať, aby ste zavolali alebo poslali SMS na telefónne číslo alebo zdieľali osobné informácie. Nahláste prosím podozrivú aktivitu použitím voľby “Nahlásiť zneužitie”.

Ďalšie informácie

Táto téma bola archivovaná. Ak potrebujete pomôcť, založte prosím novú otázku.

How do I set master password timeout?

  • 1 odpoveď
  • 1 má tento problém
  • 14 zobrazení
  • Posledná odpoveď od cor-el

Zsombor
Zsombor
more options

I am using Firefox Browser 78.0.2 (64-bit) on macOS 10.15.5 (19F101).

I enabled all the features in the "Logins and Passwords" section of Preferences/Privacy Security. This resulted in Firefox remembering and auto-filling usernames and passwords as expected. It would ask me for the master password only once for every browser restart, i.e. if I close all the browser windows. If I keep the browser running it seems it'll happily fill in my passwords without ever again asking for the master password.

I do not think this safe enough. How do I make the browser ask for the master password after a certain time, even if I don't restart the browser?

I did a bit of research and I found the signon.masterPasswordReprompt.timeout_ms parameter under about:config. I don't know if I misunderstood the purpose of this parameter or it is just broken but this parameter does not set the master password timeout in milliseconds. Its default value is 900000, which would be 15 mins. The browser most definitely does not ask for the master password after 15 mins. I tried to set this value to various smaller values to basically no avail. One time I did manage to get a master password prompt without restarting the browser but I can't reproduce this so I am not sure what caused it.

I would appreciate any help or pointers!

I am using Firefox Browser 78.0.2 (64-bit) on macOS 10.15.5 (19F101). I enabled all the features in the "Logins and Passwords" section of Preferences/Privacy Security. This resulted in Firefox remembering and auto-filling usernames and passwords as expected. It would ask me for the master password only once for every browser restart, i.e. if I close all the browser windows. If I keep the browser running it seems it'll happily fill in my passwords without ever again asking for the master password. I do not think this safe enough. How do I make the browser ask for the master password after a certain time, even if I don't restart the browser? I did a bit of research and I found the '''signon.masterPasswordReprompt.timeout_ms''' parameter under about:config. I don't know if I misunderstood the purpose of this parameter or it is just broken but this parameter ''does not'' set the master password timeout in milliseconds. Its default value is 900000, which would be 15 mins. The browser most definitely does not ask for the master password after 15 mins. I tried to set this value to various smaller values to basically no avail. One time I did manage to get a master password prompt without restarting the browser but I can't reproduce this so I am not sure what caused it. I would appreciate any help or pointers!

Upravil(a) Zsombor dňa

Všetky odpovede (1)

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

The signon.masterPasswordReprompt.timeout_ms pref is about asking for the MP if you want to inspect a password in Lockwise. You can easily logout by canceling a MP prompt like you get when you want to inspect a password or via the logout button in the security device manager.

  • Options/Preferences -> Privacy & Security
    Certificates: Security Devices -> Software Security Device

You may have to zoom out the page to get the right sidebar with the Logout button visible.