Firefox Community Forum

Today, after browsing about whether or not I should continue using Firefox as my password manager, I decided to mitigate the most important security flaw in browser based password managers, by setting up a Primary Password. I choose to use an easy to remember 8 word long passphrase as my Primary Password. I noted down the passphrase in my diary. Due to problem while loading YouTube, I decided to restart Firefox by going to about:profiles and selecting "restart normally". This issue where Firefox starts to struggle connecting to internet is a relatively common occurrence on my Firefox install, and restarting Firefox fixes the issue. When Firefox restarted, I was prompted to enter the primary password. I confidently entered my passphrase, but it was rejected. I tried to typing to it more carefully several times. I got my diary and checked it to make sure I was entering the passphrase correctly. Following troubleshooting steps on a similar thread, I restarted firefox, no luck. I than rebooted my computer, issue persisted. I decided to restart Firefox with extensions disabled, and also in troubleshooting mode. Firefox still rejects my passphrase. I have my Firefox account synchronized with two Android phones. Will reinstalling Firefox and syncing with my Firefox account solve the problem? In a similar troubleshooting thread, renaming key4.db and logins.json is suggested. However, it has not been explained very clearly. My logins.json file was modified an hour before disaster, even though I had made no changes to any of my logins or the master password. Is my logins.json corrupted causing the issue? I will like to point out a design flaw in Firefox which might have caused the issue. I usually want to see what I am typing when I am entering an encryption password. This is to make sure that I don't mistype something. However, in Firefox Primary Password configuration window, there is not option to see what you are typing. Firefox relies on low probability of typing the wrong password twice. I don't think devs should be so worried about shoulder attacks to not even allow users option to view what they typing. My case might be that low probability situation where I made the same mistake while typing the passphrase twice.

This might just be a blind thing, I use the NVDA screen reader, but when I sign in to firefox, my password is 12 letters long, but when I look on my settings page, it's 18 characters long, is this normal?

I can log in using my 12 letter password and it's not a master password, I don't have one of those.

Any help would be apreciated.

Hi,

Since recent updates to Firefox I get a purple pop-up listing Trackers at the bottom right of my screen every time I open a new webpage. I'm happy with my PC security settings and have good protection software running - but this pop-up listing Trackers is becoming a nuisance.

Is there a way to stop Firefox displaying the Tracker notification pop-ups whilst still intercepting and blocking them in accordance with my security settings?

I see that other users have asked the same question, but it does not seem to have been answered yet.

Thanks,

Peter

I haven't had to sign in for a while, so tonight when I tried and I typed the password in correctly the box just immediately closes and reopens like its incorrect. I have tried locating the key3.db and key4.db which I can't find on my system, nor can I find the login.json that is supposed to have the log of passwords to back them up. I don't have any 3rd party password managers and I've tried with my VPN disconnected. I've used the password generator to secure some of my websites so I don't even know was some of my passwords are, so resetting the primary password would be a huge hassle. If someone could please help me out I would be very appreciative. Thanks!

Hi, I've been using Firefox for decades and been saving passwords in it without any second thoughts, thinking they were fully secure.

Today I had to install a Yandex Browser for my work for the first time in my life (on a new clean Windows 10). It also asked to "make changes on my device", and I rejected it. What happened next absolutely terrified me. It immediately grabbed all the tabs, the sessions and, most importantly, the years worth of passwords from my Firefox. Does it mean that they just lie there unprotected, and any random piece of code even without the administrative privileges can just take them? I'm pretty sure I didn't click anything related to legitimate data sync.

When using the Export Logins feature to create a .csv file, the last few fields don't seem to translate into any known date-stamp format in Excel. The data seems to have relative chronological value, but I can't make sense of it in a spreadsheet.

Can a developer check this and modify the output of those fields so it's more compatible?

Example:

 Header             Cell data
 ----------------------------

timeCreated 1675178753239 timeLastUsed 1684763722184 timePasswordChanged 1675178753239

Why do I keep getting this message from my A/V software (Bitdefender): firefox.exe attempted to establish a connection relying on an expired certificate to si1.lunrac.com?

Hi,

I have a policies.json file that acts as a white list for me (black listed all urls and then white listed needed urls). I was wondering is it possible to create a second .json file that will act as a black list. I want to give access to a partial admin. user to the policy.json file to be able to edit the file and add websites if needed but I want a another black list running as well to block out specific websites (this one the partial admin. will not have access to).

So to start off the first question would be is firefox only limited to one .json file for policies or can you have multiple .json files (I want to call the second file blacklist.json)? Btw I use Debian and Firefox-esr.

Thanks.

British Airways enable cookies page, essential cookies greyed out so can't log in. The other three cookie choices are live and ticked. This problem has been here for weeks - can anyone suggest what is wrong?

I use/like the randomly-generated 'strong' password feature, but is there a setting/option to have it include one or more special character(s)? So many sites nowadays require one, and VERY few *prohibit* them. I know I can 'substitute' one in there, but I'm VERY lazy! Thanks.

I have tried the suggestions as described in the following article: https://support.mozilla.org/bm/questions/1273784 However, am still having the issue. It's as if the settings are totally ignored. I am using version 108.0a1 of Firefox developer edition. Ideally what am trying to achieve is away to disable all features of ETP. I figured setting it to custom with all values unchecked would have done the trick but it's not working. What works is if I add the site to the list of Exceptions for Enhanced Tracking Protection, then I will see all Ads loaded just fine on the page. However, this is not viable for me as I have a large list of sites that I visit, and I need to see the ads on them.

Does anyone know of a way to get around this feature in FF?

Is there another setting am missing from the previous article?

Hi, this is the same issue as as described here for Mozilla Thunderbird: 64bit Thunderbird issues with 64bit PKCS#11 drivers

– Firefox 122.0 (64-bit) – Windows 11 Pro 64bit (– Thunderbird 64bit)

Even though, I use a 64bit version of Firefox, it is not able to load any 64bit PKCS#11 module for security devices. Tried on several different PCs and several different 64bit PKCS#11 drivers for different smart cards.

When I try to load e.g. C:\Windows\SysWOW64\eop2v1czep11.dll for the Czech eID, it returns "Unable to add module". When I do the same from C:\Windows\System32\eop2v1czep11.dll, it works.

The issue is that some issuers of qualified and commercial certificates (like e.g. Komerční banka) do not issue a 32bit version of PKCS#11 drivers for their smart cards anymore and the only driver available is C:\Windows\SysWOW64\mopkcs11.dll, which cannot be loaded by Firefox or Thunderbird either.

I don't see a problem in implementing the support for 64bit PKCS drivers in a 64bit browser and a 64bit email client. And if it does have the support, then there is something wrong going on.

I've got FF set for https-only. But sometimes it will tell me no https is available but when I go to the site anyway it is https.

Is this a bug or is this something in my settings?

Using Mozilla Firefox 108.0 for Ubuntu canonical 1.0 on Ubuntu 20.04.

Thanks.

Is there anyway to make a Hotkey for our Autoplay function, instead of having to go into Settings, each time we need the function?

In my experience, I have it set to Block both Video and Sound, but this blocks simple pronunciations, in Search or Translations. I hope there some way, a command, a mod or a setting allowing a Hotkey or Icon for Fast Disable/Enable.

Thanks for all your work and making the internet safer for everyone.

I can't connect to my router using this same link I've always used: https://router.asus.com:8443/ I also tried: http://router.asus.com and: http://192.168.1.1/ Nothing has changed! I get a security error. See attachment. There is no "Proceed at your own risk" option. I've spent hours searching for a work around or fix. Nothing works! How in blue blazes am I supposed to connect to my ASUS Router's GUI. This is Windows 10, Firefox 104.0.2 (64-bit)

Hello. My laptop died and according to IT is "gone". My hard disk however can still be accessed. I was able to access my firefox profile data from the old hard disk, and I was able to find the two firefox password files (key4.db and logins.json), as described in https://support.mozilla.org/en-US/kb/profiles-where-firefox-stores-user-data. However, when I use the procedure described in https://support.mozilla.org/en-US/questions/1416465 to import the passwords on my new firefox on my new laptop, it does not work: firefox tries to look for a csv file, but there is none: I only have the "raw" db and json files, because i never had the opportunity to "export" my pwds as a csv file. Is there a way to import pwds from one version of firefox (the one running on my dead machine) to another copy of firefox (the one running on my new machine), if those pwds have not been previously "exported" as csv files by the "original" firefox/machine? thank you!

On a late model Dell laptop, there are no domains listed under Exceptions-Cookies and Site Data. When I key in a domain (whether using www., http, https, or just the domain name by itself.) and click on Allow, that website is not added. It's the same as if browser security is stuck on Remove All Websites. With the same Privacy and Security settings on my desktop, I do not have this problem, so it appears not to be a matter of altering particular settings. Short of removing and reloading Firefox on the laptop, which might work but not teach anybody anything, are there suggestions?