264346 - No way of disabling "Show Passwords" in password manager

Status: RESOLVED DUPLICATE of bug 259996

(Toolkit :: Password Manager, defect)

Description

[David Janes]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7.3) Gecko/20041013 Firefox/0.10.1
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7.3) Gecko/20041013 Firefox/0.10.1

There is currently no way of disabling the show passwords button in the password
manager.

Although the Master Password's a nice feature the user must enter the master
password every browser session, which leaves their password manager wide open to
a "malicious coworker".

There should be an option to disable show passwords (not just in about:config)
which, when changed, requires a browser restart.
This would require the malicious person to enter the master password.

Before anyone says it nothing's 100% secure and there's always ways round things
but this would be IMHO a useful change.

Reproducible: Always
Steps to Reproduce:

Comment 1

[dolphinling]

As far as I can tell, you need to re-enter the master password every time you
click show passwords. Is that not the case for you?

Comment 2

[David Janes]

So it does, however it's still a problem if you don't want people clicking "Show
Passwords" but don't want to have to enter the Master Password every browser
session.

Comment 3

[Uri Bernstein]

*** This bug has been marked as a duplicate of 259996 ***