1009285 - [UX] Password Manager should make reused passwords easier to detect

Status: NEW

(Toolkit :: Password Manager, defect, P3)

Description

[[:mmc] Monica Chew (no longer reading bugmail)]

Attachment: detail.jpg

Reused passwords are probably the greatest risk to password security. The password manager could help users develop better password habits by detecting password reuse.

Comment 1

[:Gavin Sharp [email: [e-mail]]]

Morphing this into a UX bug, since that's where we'd need to start.

Comment 2

[Edoardo Putti [:edoput]]

I think that this would be a key feature for Firefox, security should be teached gently and something like a password security report should be a key feature to educate the user. I begun making an addon[1] to address the problem but that way it is an opt-in feature, not a huge help.

I'm uploading a screencast of its workflow

[1]: https://github.com/EdoPut/passwordReuseSearch

Comment 3

[Edoardo Putti [:edoput]]

Attachment: screencast of addon to search reused password

this is the current workflow for the addon, just a simple search for user & password combination