1939916 - Firefox does not ask for authentication before auto-filling password.

Status: NEW

(Toolkit :: Password Manager, defect, P3)

Description

[Anupam Sahu]

Attachment: autofill-without-authentication.mp4

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0

Steps to reproduce:

1. Allow Firefox to save your password and username for a login page.
2. Visit the login page again.
3. Select the saved password by clicking on any of the fields and choosing from a drop down menu. Note, if you have enabled auto-fill passwords in Firefox's settings, the browser fills login details automatically.

Actual results:

Firefox fills login details without asking for authentication - pin, password, or fingerprint.

Expected results:

Firefox asks to authenticate before filling in login details.

Comment 1

[Daniel Veditz [:dveditz]]

This is known behavior, doesn't need to be hidden. There's a long-standing enhancement request that's probably a dupe of this.

Comment 2

[Micah [:mtigley] (she/her)]

Thank you for the report! I'll add this as one of the items to consider for enhancing authentication in Firefox.

Comment 3

[Micah [:mtigley] (she/her)]

There are plans to adjust the messaging around requiring authentication when filling in passwords on Firefox Desktop. This will be part of the settings redesign project.

Comment 4

[BugBot [:suhaib / :marco]]

The severity field is not set for this bug.
:mtigley, could you have a look please?

For more information, please visit BugBot documentation.