540769 - Add "Master Password" support to Fennec / Firefox Mobile

Status: RESOLVED DUPLICATE of bug 592772

(Firefox for Android Graveyard :: General, defect)

Description

[Daniel Holbert [:dholbert]]

Fennec / Firefox Mobile currently has no "Master Password" option available, to encrypt saved passwords. As a result, all passwords stored in Fennec are easily available to any attacker who steals (or inspects) someone's maemo device.

This is particularly bad given that Weave syncs passwords by default.  A user may store high-value passwords in his Weave-synchronized Firefox profile(s), and protect them with a strong Master Password -- but as soon as he adds a Firefox Mobile device to his "weave synchronization cloud", that security goes out the window.

Of course, it's fine to have "no master password" be the default behavior.  But it should be available as an option, particularly since it's available on the Firefox desktop version.