Closed Bug 1393493 Opened 7 years ago Closed 7 years ago

ask firefox account password to show stored logins

Categories

(Toolkit :: Password Manager, defect)

Product:
Toolkit
Component:
Password Manager
Version:
55 Branch
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED DUPLICATE of bug 1223185

People

(Reporter: or3stis.man, Unassigned)

Details

(Keywords: dupeme) 

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.59 Safari/537.36

Steps to reproduce:

On the Firefox preferences pane
1. security pane
2. option 'saved logins'
3. option 'show passwords'


Actual results:

Firefox asks for yes/no permission to show stored passwords.


Expected results:

Instead of asking for yes/no permission Firefox should ask for the Firefox account password. In a similar manner that Chrome and Safari do. This is major a security issue. For example, if I leave my laptop unattended a somewhat Firefox savvy user could easily steal my passwords. Moreover, if I use my regular Firefox profile in my Firefox app on my workstation, IT admins are able to unlock my workstation account, start a Firefox session and then obtain my stored passwords in my firefox profile.
I would be happy to implement this feature, if suitable guidance is provided.
Component: Untriaged → Preferences
Component: Preferences → Password Manager
Keywords: dupeme
Product: Firefox → Toolkit
This will be considered as part of a master password replacement/redesign.
Status: UNCONFIRMED → RESOLVED
Closed: 7 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.