Open Bug 1934317 Opened 1 year ago Updated 3 months ago

Firefox mobile doesn't sync deleted passwords from desktop

Categories

(Firefox for Android :: Accounts and Sync, defect, P3)

Firefox 133
defect

Tracking

()

UNCONFIRMED

People

(Reporter: mozilla.5vsf3, Unassigned)

References

Details

Attachments

(5 files, 1 obsolete file)

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0
Firefox for Android

Steps to reproduce:

  1. Have Firefox Android app and Firefox desktop app installed.
  2. Have a Mozilla account signed in and with synced passwords enabled on both devices.
  3. Have a saved account/password entry.
  4. Delete the account/password entry on Firefox desktop.
  5. Sync both devices.

Actual results:

The deleted password isn't deleted on Firefox Android after sync.

Expected results:

The deleted password should be deleted on Firefox Android when the account is synced.

The user expect the password to be deleted. If bad actors access to user's mobile device>firefox passwords, they can access to the supposed deleted password.

This doesn't need to be hidden, which makes it available to more team members

Group: firefox-core-security
Component: Untriaged → Accounts and Sync
Product: Firefox → Fenix

(In reply to Daniel Veditz [:dveditz] from comment #1)

This doesn't need to be hidden, which makes it available to more team members

Ok! How to change that? I can't find the option to change it now.

Attached image mobile - synced passwords.png (obsolete) —
Attachment #9440853 - Attachment is obsolete: true

Update: I've attached the 4 screenshots as separate files for easier access. The initial bug report form allowed only one attachment, so I had originally uploaded a ZIP file as a workaround.

Severity: -- → S3
Priority: -- → P3
See Also: → 1931224

Issue is still reproduced on latest Firefox 140(Windows and Android).

Unfortunately I can't reproduce this. Does password syncing otherwise appear to be working (ie, do changes to existing passwords or new passwords get reflected on the mobile device)?

(In reply to Mark Hammond [:markh] [:mhammond] from comment #10)

Unfortunately I can't reproduce this. Does password syncing otherwise appear to be working (ie, do changes to existing passwords or new passwords get reflected on the mobile device)?

Last I checked(2 months), yes. Edits and new passwords were synced but deleted passwords were not deleted on the phone.

Additionally, I still have about 1000+ passwords(old passwords from internal/private IP/domains) I can't delete on my phone because for each entry I need click 4 buttons on the phone:

  1. Click on password entry.
  2. Click 3 dots.
  3. Click delete.
  4. Click confirm in the popup.

4 monotonous repeated clicks per entry.

Note that I had deleted all passwords in desktop at once and it was over 2 months ago.

I will try to reproduce again now. I just need to turn on password sync on PC and phone.

(In reply to Mark Hammond [:markh] [:mhammond] from comment #10)

Unfortunately I can't reproduce this. Does password syncing otherwise appear to be working (ie, do changes to existing passwords or new passwords get reflected on the mobile device)?

Also confirm that the issue still happening to me as I first reported months ago. Just checked my list of passwords on mobile and the dash.cloudflare.com password still there even if I deleted it on my desktop sessions months ago (I didn't manually delete it from mobile just to see if the bug gets fixed).

New added passwords from desktop are synced fine to mobile, what is not working is the sync of the deletion of passwords.

Just tested on 142 on Android and 142 in Phone. It worked.

Not sure what fixed. Sry for double comment.

You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: