Closed Bug 1817863 Opened 3 years ago Closed 3 years ago

You can skip the Primary Password when opening FireF by switching to a fullscreen application and back

Categories

(Toolkit :: Password Manager, defect)

Firefox 110
defect

Tracking

()

RESOLVED INVALID

People

(Reporter: ninham.nathaniel, Unassigned)

Details

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/110.0

Steps to reproduce:

I opened Firefox and was greeted with my normal Primary Password request. I switched back to my fullscreen game, then back to FireFox

Actual results:

I was able to use the browser freely without ever putting in my password.

Expected results:

I should have still needed to put in my password even after putting opening a full screen app

The primary password dialog is not there to stop people using the browser.

All it does is protect your passwords. Your "normal" primary password request is probably because either a page being loaded, or a Firefox-internal thing like Sync, needs login/password information. You can just click [cancel] on the prompt, you don't need to jump through any other hoops to "bypass" the prompt. (Although of course there's no access to your stored passwords until/unless you provide the primary password. There is no way to bypass this as the primary password is cryptographically required to access this data. Other data in your profile (history, bookmarks, etc.) is not protected in the same way.)

If you don't want people to be able to access your browser profile other than your password data, lock the machine using the OS facilities for this so people need your OS username and password to log in.

Group: firefox-core-security
Status: UNCONFIRMED → RESOLVED
Closed: 3 years ago
Component: Untriaged → Password Manager
Product: Firefox → Toolkit
Resolution: --- → INVALID
You need to log in before you can comment on or make changes to this bug.