Saved Logins Information too easily accessible
Categories
(Firefox for Android :: General, enhancement)
Tracking
()
People
(Reporter: source, Unassigned)
Details
User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:80.0) Gecko/20100101 Firefox/80.0
Steps to reproduce:
Since Firefox for Android 68, all synced passwords/login data can be accessed without having to enter a primary (ex. master) password.
By clicking on Menu -> Settings -> Logins -> Saved Logins, only the device's unlock password is required to view all passwords.
Actual results:
I'm able to view all passwords/logins in plain text.
Expected results:
There should be an option to restrict access to password/logins data using some form of custom primary/master password, similar to previous versions of Firefox for Android.
Fingerprint and (typically weak) unlock passwords can be easily flawed. Thus, access to all saved logins information is quite readily available to phone thieves. Users should at least have an option to secure themselves from this kind of risk.
|
||
Comment 1•6 years ago
|
||
|
||
Updated•3 years ago
|
Description
•