X
Tap here to go to the mobile version of the site.

منتدى الدعم

Usernames visible in private window after master password entered in normal window

Posted

I have a master password set and this works as expected. However, if I start a private window after inputting the password in the normal window, all the usernames (not passwords) are visible in the private window. This looks like a breach of privacy? I would have expected that a new private window would have to request the master password to be re-entered. Is this by design?

I have a master password set and this works as expected. However, if I start a private window after inputting the password in the normal window, all the usernames (not passwords) are visible in the private window. This looks like a breach of privacy? I would have expected that a new private window would have to request the master password to be re-entered. Is this by design?
Quote

Additional System Details

Application

  • User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0

More Information

jscher2000
  • Top 10 Contributor
8837 solutions 72222 answers

Is this a change from the older design of the Password Manager before Firefox 70?

Since you are the only one who sees the Logins & Passwords page, I'm not sure why it is a problem that you don't have to unlock the page a second time. Is there a specific reason you're concerned?

One thing you might want to do is not allow Firefox to autofill logins, which requires you to always choose them from a drop-down list on the username field. The setting for that is:

(1) In a new tab, type or paste about:config in the address bar and press Enter/Return. Click the button accepting the risk.

(2) In the search box above the list, type or paste signon and pause while the list is filtered

(3) Double-click the signon.autofillForms preference to switch the value from true to false

Is this a change from the older design of the Password Manager before Firefox 70? Since you are the only one who sees the Logins & Passwords page, I'm not sure why it is a problem that you don't have to unlock the page a second time. Is there a specific reason you're concerned? One thing you ''might'' want to do is not allow Firefox to autofill logins, which requires you to always choose them from a drop-down list on the username field. The setting for that is: (1) In a new tab, type or paste '''about:config''' in the address bar and press Enter/Return. Click the button accepting the risk. (2) In the search box above the list, type or paste '''signon''' and pause while the list is filtered (3) Double-click the '''signon.autofillForms''' preference to switch the value from true to false
Was this helpful to you?
Quote
cor-el
  • Top 10 Contributor
  • Moderator
17680 solutions 159933 answers

The master password unlocks the Password Manager, so once the MP is entered then there is always full access to the usernames and passwords possible. In the legacy Password Manager you could see all the passwords, but in Lockwise you need to enter the MP for each password you would want to inspect. The MP is initially requested to the logins database and make access possible to the usernames.

The master password unlocks the Password Manager, so once the MP is entered then there is always full access to the usernames and passwords possible. In the legacy Password Manager you could see all the passwords, but in Lockwise you need to enter the MP for each password you would want to inspect. The MP is initially requested to the logins database and make access possible to the usernames.
Was this helpful to you?
Quote
اطرح سؤالا

You must log in to your account to reply to posts. Please start a new question, if you do not have an account yet.