Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Hierdie gesprek is in die argief. Vra asseblief 'n nuwe vraag as jy hulp nodig het.

Why can the master password be bypassed ?

  • 1 antwoord
  • 1 het hierdie probleem
  • 9 views
  • Laaste antwoord deur cor-el

Nertsch
Nertsch
more options

Hi,

I'm using a Firefox-Profile from two Installations and it seems to work fine: 1) Firefox on Windows 10 2) Firefox ESR on Debian (For some reason "normal" Firefox is not available on Debian)

Today I entered a Master-Password for that Profile via the Debian. Now I have to enter the Master-Password when I want to display/edit the passwords. But if I access the profile via Windows, I don't need to enter a master password (also the master password checkbox is not checked) and I can see all the passwords.

Does the master password just affect new passwords and the old ones were ignored ? Or is that because I'm using different versions of firefox?


br Gerhard

Hi, I'm using a Firefox-Profile from two Installations and it seems to work fine: 1) Firefox on Windows 10 2) Firefox ESR on Debian (For some reason "normal" Firefox is not available on Debian) Today I entered a Master-Password for that Profile via the Debian. Now I have to enter the Master-Password when I want to display/edit the passwords. But if I access the profile via Windows, I don't need to enter a master password (also the master password checkbox is not checked) and I can see all the passwords. Does the master password just affect new passwords and the old ones were ignored ? Or is that because I'm using different versions of firefox? br Gerhard

All Replies (1)

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

Are you using the same Firefox version on Debian and on Windows?

The Firefox ESR version you use on Linux might be using key3.db (DBM) for the key file that stores the encryption key. The newer version you use on Windows might be using key4.db (SQL) for the key file. You can try to remove the key4.db file in that profile folder to see if that works. Note that you can get issues if you share the same profile folder between multiple operating systems (file path formats aren't the same).