Closed Bug 1555440 Opened 6 years ago Closed 6 years ago

Profiles should only be usable after entering the master password at startup

Categories

(Toolkit :: Password Manager, enhancement)

66 Branch
enhancement
Not set
normal

Tracking

()

RESOLVED DUPLICATE of bug 16489

People

(Reporter: wrichmond.86, Unassigned)

Details

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0

Steps to reproduce:

I open Firefox (I should note this is portable) and browse without having to enter the Master Password. Eventually I am prompted to enter the password.

Actual results:

I opened my email, browsed several pages, and waited around but was not prompted to enter the Master Password. Eventually while browsing the dialogue prompt did display requesting my password and then worked as expected.

Expected results:

As soon as I opened the browser I should have had no option other than to enter the Master Password. The browsing screen should have been grayed out entirely.

Bug 1523859 was marked as a duplicate of bug 16489 on January 30th, so there's still no intention to implement this.

Status: UNCONFIRMED → RESOLVED
Type: defect → enhancement
Closed: 6 years ago
Component: Untriaged → Password Manager
Product: Firefox → Toolkit
Resolution: --- → DUPLICATE
Summary: The Master Password field only appears flippantly after allowing use of browser with no password. → Profiles should only be usable after entering the master password at startup

Master Password is already an implementation. It fails to work consistently.

(In reply to Weston from comment #2)

Master Password is already an implementation. It fails to work consistently.

Options > Privacy & Security > Logins & Passwords > Use a Master Password
Sometimes it prompts for a password as soon as the browser opens...
Sometimes I can browse through my emails before it ever prompts for the password.

It is only intended to prevent snooping of your saved passwords… if you already have saved login cookies for your email then the saved password isn't needed to read the emails.

You need to log in before you can comment on or make changes to this bug.