Open Bug 1636466 Opened 4 years ago Updated 2 years ago

Show passwords in about:logins asks for wrong Windows credentials (smart card instead of user-password)

Categories

(Firefox :: about:logins, defect, P2)

77 Branch
defect

Tracking

()

Tracking Status
firefox76 --- disabled
firefox77 --- disabled
firefox78 --- disabled
firefox79 --- disabled
firefox80 --- disabled

People

(Reporter: jeanpaul, Unassigned)

References

Details

User Agent: Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0

Steps to reproduce:

(Use a portable computer with a smart card reader)
Go to about:logins
Either click "Copy" or the eye icon on a saved login

Actual results:

An auth popup appears ("verify your identity to reveal/copy the saved password"), asking me to "Insert a smart card" as the single way to authenticate myself.
I have no way to enter my Windows session's password.

Expected results:

I use a user / password to log in to my OS (Windows) account, I never used a smart card nor have any. The auth popup should ask me my OS password.

Additional info:
OS: Windows 7 on a portable computer with a smart card reader

Additional additional info:
The problem doesn't appear on a desktop computer, where I'm asked my Windows password.

I had to use a third party tool to be able to extract passwords that were stored only in Firefox on this portable computer.

Component: Untriaged → about:logins
Blocks: 1626778
Blocks: 1194529
No longer blocks: 1626778
Severity: normal → S2
Priority: -- → P1

Matt, is someone working on this for 78?

Flags: needinfo?(MattN+bmo)

No, we haven't figured out the path forward for the whole feature yet. IMO we should guard it from riding the trains until UX makes their proposal in a few weeks.

Flags: needinfo?(MattN+bmo)
Priority: P1 → P2

This doesn't affect users at this point, so doesn't warrant tracking as S2.

Severity: S2 → S3

The bug has a release status flag that shows some version of Firefox is affected, thus it will be considered confirmed.

Status: UNCONFIRMED → NEW
Ever confirmed: true
You need to log in before you can comment on or make changes to this bug.