I can access my email history without entering the software master password
Categories
(Thunderbird :: Security, defect)
Tracking
(Not tracked)
People
(Reporter: zwt2767175379, Unassigned)
Details
User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:132.0) Gecko/20100101 Firefox/132.0
Steps to reproduce:
I have a master password set for my Thunderbird. I accidentally opened it after completely exiting Thunderbird. I clicked to close it, but it took me back to the main email page where I could view my history. I did not enter my Thunderbird master password during this time.
Actual results:
Allowed me to access my email without entering my Thunderbird master password
Expected results:
The mailbox and its history should not be accessible without entering the master password
|
||
Comment 1•1 year ago
|
||
Hi, as mentioned in the settings next to the option, the primary password protects your passwords, but not your emails. If you want application protection you should use OS features or other security software to prevent access.
See here for more information: https://support.mozilla.org/en-US/kb/protect-your-thunderbird-passwords-primary-password#w_what-does-the-primary-password-protect
(In reply to Mark Banner (:standard8) from comment #1)
Hi, as mentioned in the settings next to the option, the primary password protects your passwords, but not your emails. If you want application protection you should use OS features or other security software to prevent access.
See here for more information: https://support.mozilla.org/en-US/kb/protect-your-thunderbird-passwords-primary-password#w_what-does-the-primary-password-protect
*** This bug has been marked as a duplicate of bug 1566458 ***
thanks
Description
•