Closed Bug 1627493 Opened 4 years ago Closed 4 years ago

"View all saved logins" link makes it too easy for other users of the computer to find your passwords

Categories

(Toolkit :: Password Manager, defect)

68 Branch
defect
Not set
normal

Tracking

()

RESOLVED DUPLICATE of bug 1194529

People

(Reporter: Peso75kg, Unassigned)

Details

User Agent: Mozilla/5.0 (Android 8.0.0; Mobile; rv:68.0) Gecko/68.0 Firefox/68.0

Steps to reproduce:

Saved usernames and passwords in Firefox

Actual results:

When I access to one of the websites where I saved the password and click to the login page, a link is now appearing. If one clicks there, a page with all usernames passwords is shown.
OK, also in the past one could see the saved passwords by surfing the settings, but now the browser itself is inviting people to see the saved passwords with no effort!
I have my passwords saved there and anybody else with no effort can see them if I am not there when others use my computer!
Make it as it was in prevuois versions, please!

Expected results:

Username and password should appear, but no link to all saved passwords!

Group: firefox-core-security
Component: Untriaged → Password Manager
Product: Firefox → Toolkit
Summary: Every 10-years old child can be an hacker if you use Firefox → "View all saved logins" link makes it too easy for other users of the computer to find your passwords

You have always had the option to use a Master Password if you want to protect your saved logins. In Firefox 76 (in Beta starting this week) we will prompt to authenticate with your operating system if you don't have a master password.

Status: UNCONFIRMED → RESOLVED
Closed: 4 years ago
Resolution: --- → DUPLICATE

Matthew N. : I know that, but i don't see the value of proposing a link that shows all the passwords, considering that not all people use a master password. It was relatively easy also before to go in the settings and see the passwords, but now the browser is proposing to people all of them with NO EFFORT, even if they never thougth to that, or they don't want.

You need to log in before you can comment on or make changes to this bug.