Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

how much can I trust firefox password manager

  • 3 பதிலளிப்புகள்
  • 2 இந்த பிரச்னைகள் உள்ளது
  • 8 views
  • Last reply by user1257813

How safe is firefox password manager? Can you give us some information on this subject? Mainly focus on: how hard is it to crack the passwords on firefox password manager for a hacker? How are our data stored, i.e. which type of encryption, both in my computer and your Sync server?

How safe is firefox password manager? Can you give us some information on this subject? Mainly focus on: how hard is it to crack the passwords on firefox password manager for a hacker? How are our data stored, i.e. which type of encryption, both in my computer and your Sync server?

தீர்வு தேர்ந்தெடுக்கப்பட்டது

The names and passwords stored in logins.json are encrypted with an encryption key that is stored in the key3.db file. The master password adds an additional level to this encryption. If you do not use a master password then having access to key3.db and logins.json is sufficient to have access to the encrypted names and passwords by placing the two files in a Firefox profile folder. Make sure to use a password that is sufficiently strong, e.g. at least 10 or 12 characters and a mixture of uppercase, lowercase, numbers and symbols that can't be found via a dictionary look up by combining words and you should be safe.

Read this answer in context 👍 1

All Replies (3)

தீர்வு தேர்ந்தெடுக்கப்பட்டது

The names and passwords stored in logins.json are encrypted with an encryption key that is stored in the key3.db file. The master password adds an additional level to this encryption. If you do not use a master password then having access to key3.db and logins.json is sufficient to have access to the encrypted names and passwords by placing the two files in a Firefox profile folder. Make sure to use a password that is sufficiently strong, e.g. at least 10 or 12 characters and a mixture of uppercase, lowercase, numbers and symbols that can't be found via a dictionary look up by combining words and you should be safe.

Thanks for this valuable information. @cor-el