Bypass Master Password Login Feature by clicking Cancel

RESOLVED INVALID

Status

()

Firefox
General
--
minor
RESOLVED INVALID
10 years ago
10 years ago

People

(Reporter: BUGUNTER, Unassigned)

Tracking

Firefox Tracking Flags

(Not tracked)

Details

(Reporter)

Description

10 years ago
User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.0.3) Gecko/2008092417 Firefox/3.0.3
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.0.3) Gecko/2008092417 Firefox/3.0.3

I have opted to use the Master Password login feature for security reasons.
When I click the shortcut to Mozilla Firefox, I am prompted with a password popup, where I am required to enter the master password for the browser to load.
I noticed that when I clicked the <Cancel> button the browser was still able to load, and that I could enter in the URL of any website and then continue browsing as normal.

I thought that clicking the <Cancel> button, the Firefox browser would not load.

Reproducible: Always

Steps to Reproduce:
1.Enable master password as a setting on Firefox.
2.Close Browser
3.Open Browser via shortcut on desktop (you will  be prompted with the password login).
4.Rather than entering a password, click Cancel.
Actual Results:  
The browser loaded.

Expected Results:  
I would presume, the application (browser) would not load.
The master password only protects the passwords that are stored with the "remember passwords" feature.  It does not prevent the user from using Firefox.
Status: UNCONFIRMED → RESOLVED
Last Resolved: 10 years ago
Resolution: --- → INVALID
Group: core-security
This seems to be a frequently asked question.  
Perhaps we need a web page on sumo about this?
(In reply to comment #2)
> This seems to be a frequently asked question.  
> Perhaps we need a web page on sumo about this?

Chris, can you find a place for this on SUMO?

Updated

10 years ago
Keywords: user-doc-needed

Comment 4

10 years ago
If I understand this correctly, some people think that Firefox is not supposed to run, if you click on [Cancel] in the Master Password prompt (when loading Firefox). And the purpose of the knowledge base article is to clarify that the Master Password protects your passwords from being used, not Firefox from being run.
That's correct. Thanks Chris!

Updated

10 years ago
Keywords: user-doc-needed
You need to log in before you can comment on or make changes to this bug.