Important Notice: We're experiencing email notification issues. If you've posted a question in the community forums recently, please check your profile manually for responses while we're working to fix this.

On Monday the 3rd of March, around 5pm UTC (9am PT) users may experience a brief period of downtime while one of our underlying services is under maintenance.

Kërkoni te Asistenca

Shmangni karremëzime gjoja asistence. S’do t’ju kërkojmë kurrë të bëni një thirrje apo të dërgoni tekst te një numër telefoni, apo të na jepni të dhëna personale. Ju lutemi, raportoni veprimtari të dyshimtë duke përdorur mundësinë “Raportoni Abuzim”.

Mësoni Më Tepër

stored password security in firefox

  • 1 përgjigje
  • 1 e ka hasur këtë problem
  • 3 parje
  • Përgjigjja më e re nga cor-el

more options

I just installed Brave, and clicked on "Import settings & bookmarks", then chose Firefox from a popup list

Without typing my password, or doing anything else, Brave then instantly imported all of the saved passwords that I had stored in Firefox. I can now view all of my most secret saved passwords of Firefox... in Brave

This makes me wonder, if Brave can instantly import (and display in clear text) all of my Firefox saved passwords, couldn't any other rogue app do exactly the same?

Shouldn't they be stored in an encrypted format, at least?

Am I missing something or are the passwords wide open that Firefox saves?

I just installed Brave, and clicked on "Import settings & bookmarks", then chose Firefox from a popup list Without typing my password, or doing anything else, Brave then instantly imported all of the saved passwords that I had stored in Firefox. I can now view all of my most secret saved passwords of Firefox... in Brave This makes me wonder, if Brave can instantly import (and display in clear text) all of my Firefox saved passwords, couldn't any other rogue app do exactly the same? Shouldn't they be stored in an encrypted format, at least? Am I missing something or are the passwords wide open that Firefox saves?

Krejt Përgjigjet (1)

more options

Are you using a primary/master password because if you do not use it then it is quite easy to get the logins because the encryption key is stored in key4.db (SQLite database) ?

If you use a Primary Password then you shouldn't be possible.