Compare Revisions

Learn how to use Sync in Firefox with a Primary Password (formerly known as a "Master Password") for extra protection.

[[Template:primarypassword]] Desktop Firefox (ie, Windows, Mac, Linux, etc) has the option of using a Primary Password to protect all your saved passwords. When a Primary Password is enabled, your saved passwords are encrypted and can not be accessed without entering the Primary Password. See [[Use a Primary Password to protect stored logins and passwords]] for more information. =How does my Primary Password work with Sync?= When [[How do I set up Sync on my computer?|using Sync]], your Firefox accounts login is stored with your saved passwords in the [[Password Manager - Remember, delete and edit logins and passwords in Firefox|Firefox password manager]]. Your Primary Password must be entered so Sync can access your Firefox accounts login. Once the Primary Password has been entered, Sync can also access your other saved passwords and sync them between your devices. =How are my passwords kept safe?= When you save website passwords, the Primary Password feature encrypts them before storing them on your computer, then decrypts them when they are handed to Sync after you enter your Primary Password. Sync then takes your decrypted passwords, and re-encrypts them using a different (and better) encryption scheme based on your Firefox accounts password, before sending the encrypted version online for storage on the Sync servers. The decrypted copies of your password are never transmitted online. While Sync does encrypt your passwords online and on the Sync servers, it does not make any attempt to encrypt them on the device itself - that is the job of the Primary Password. The Primary Password itself is not synced between devices, so you can have a different (or no) Primary Password on other devices. ('''Tip:''' Increase protection by enabling a Primary Password on each device. See [[Use a Primary Password to protect stored logins and passwords]] =What about Android and Apple's iOS?= Mobile versions of Firefox locally encrypt your passwords, but do so by relying on the builtin security of the device rather than a Primary Password. Your Firefox Account password is required to connect to Sync so each login can be re-encrypted in a way that other devices are able to decrypt. {note}'''Security tip:''' Always choose a strong password for your Firefox account and be careful not to lose it. If you reset your password after forgetting it, you will lose access to your Sync data until you resync your device using the new password. {/note}