Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

If someone steal files that contain master password and website username&password ....

  • 10 replies
  • 4 have this problem
  • 4 views
  • Last reply by cor-el

more options

can he/she decrypt those files and get my website user name and password??

All Replies (10)

more options

It depends on the strength of the master password.

There are programs available to crack passwords, a common method used is either brute force or dictionary attacks. If you have a weak master password, such as a word, password cracking applications will probably be able to crack the master password, giving somebody access to your other passwords. If you use a strong master password that contains a mixture of upper and lower case letters, numbers and other characters, it will be very difficult to crack, and will likely take a prohibitively long time.

more options

OK. Are those files signons.sqlite and key3.db ??

more options

The passwords are stored in signons.sqlite, key3.db is used to encrypt/decrypt the passwords. Those 2 files need to remain together.

more options

Do they contain websites addresses?

more options

signons.sqlite contains the web address, username and password.

more options

Only the user name and password are encrypted. The website URL is in plain text in signons.sqlite.

more options

Is encryption strong?

more options

Firefox uses Triple-DES encryption, if you use a strong master password it will be very difficult to crack. As I mentioned before, the strength of your master password is important.

more options

Does Mozilla website have an article about Firefox encryption method???

more options