This thread was archived. Please ask a new question if you need help.
Firefox Sync: Is it safe?
Hi all, I just noticed that there was an update to Firefox’s sync service and it seems that my old sync details no longer work so I need to move to the new system. Since I do so much of my work and I keep so much highly personal information in Firefox, I just wanted to know how I can check if this new Firefox sync service is safe. Is my personal information safe? Can my personal information be shared with others? Can the Mozilla people access my personal information? I didn’t want to use Firefox Sync until I was 100% certain that it was safe and nobody could access my personal information such as the Mozilla people or anyone else.
Its honestly up to you, whatever meets your needs. Firefox Sync is nice because it's built in, free, secure and easy. Lastpass may have other features that meet your needs better though, it's all something your personal experience is the only thing that can tell.Read this answer in context 👍 1
All Replies (20)
Mozilla are pretty hot on protecting your privacy. However, the old version of Sync used to fully encrypt your data before uploading it to Mozilla's servers - the new version doesn't do this.
If you still have a device that's connected to your old Sync account, it's possible to keep using the old Sync even with the latest versions of Firefox thanks to a couple of (fairly straightforward) workarounds.
Do you still have a device that is connected to your old Firefox Sync account? If so, I'll happily give you some instructions.
The new Sync version used in current Firefox releases is completely different than the version that was previously used. You enter the name and password of the Firefox account on each computer to connect to the Sync account. With the new Sync version used in current Firefox releases you enter the name and password of the Firefox account on each computer to connect to the Sync account. You can no longer pair a new device by entering a pairing key on a connected device.
The currently used new Sync version still uses a Sync key to encrypt data locally before uploading, but this Sync key is generated internally from the password of your Firefox account, so you no longer need to worry about it. This also means that the Sync key is changed when you change (reset) the password of the Firefox account and you lose all data stored on the Sync server when doing that. You can delete old Sync data and the old account by going to this link:
So the older Firefox Sync is more 'trustworthy and secure' than the current Firefox Sync?
How do I use the older Firefox Sync? I need to add another device to my Firefox Sync.
Thanks for any help!!!
Thanks, but I'm not interested in Firefox Portable because I use Windows and a Mac.
I just tried logging into my old original Firefox Sync account, but it says 'Unknown account' when I try to login and when I ask for a password reset it just says "Unknown account."
It looks like I may NEED to use the new Firefox Sync. Or is there a way I can access my original Firefox Sync Account?
Thanks for any help!
I just checked and I still have the 26 Digit Firefox Sync 'Key'. Can I use this somehow to use my old Firefox Sync account?
Modified by newbie333
If the Sync service comes up with "Unknown account" the old Recovery Key won't do you any good; it means Mozilla Sync doesn't even know that you once had the old Sync account.
As far as adding a device to the old Sync service goes - no, that hasn't been for 6 months now. The new Sync is 5 Firefox versions old already [29 thru 33] and Mozilla has only been supporting the old Sync this long due to the ESR versions. And as of Firefox 31 ESR the old Sync isn't used by any current version, and once Firefox 34 and ESR 31.3 are released on Nov 25 I wouldn't be surprised if the old Sync servers are shut down withing a week or two.
I see. Thanks for your reply.
Is there any possibility for me to somehow use the old Firefox Sync Service?
I'm just worried that the new Firefox Sync isn't trustworthy and that Mozilla may access my personal information or share my personal information.
We can't access your personal information even in the new sync, https://blog.mozilla.org/services/2014/04/30/firefox-syncs-new-security-model/ https://blog.mozilla.org/services/2014/02/07/a-better-firefox-sync/
Quite honestly, the new Sync is actually more secure that the older version - because it doesn't use the Sync Key / Recovery Key as the older version used. The new version has a hidden implementation of the "security key" instead; the user doesn't ever see it or have to write it down anywhere.
Thanks, I'm reading those URL links now.
I just found this URL and I'm about to read it. Supposedly has really important information: https://github.com/mozilla/fxa-auth-server/wiki/onepw-protocol
Is it accurate?
So it's not possible for Mozilla or other companies to access my personal information? Is the only way for others to access my personal information by figuring out my username and password?
The currently used new Sync version still uses a Sync key to encrypt data locally before uploading, but this Sync key is generated internally from the password of your Firefox account, so you no longer need to worry about it. This also means that the Sync key is changed when you change (reset) the password of the Firefox account and you lose all data stored on the Sync server when doing that.
See "Why does Firefox Accounts require me to choose a password?":
Thanks! Does anyone know if this is accurate information about Mozilla's Sync? https://github.com/mozilla/fxa-auth-server/wiki/onepw-protocol
I'm trying to decide if I should use Firefox Sync or not.
Is there any other way for me to share my bookmarks on a Mac and a Windows8 PC?
Why isn't Firefox available on iPhones and iPads by the way? I was thinking of buying an iPad...
1. Yes, this information is correct - https://github.com/mozilla/fxa-auth-server/wiki/onepw-protocol
2. See this for a comparison of browser synchronizes. http://en.wikipedia.org/wiki/Comparison_of_browser_synchronizers
3. https://wiki.mozilla.org/Mobile/Platforms#Other_Platforms iPhone / iPad / iPod
I'm leaning towards using Firefox Sync. Does anyone have any reason I ought to think about before I go ahead and use Firefox Sync? I'm already using LastPass to share my usernames and password login information for sites.
Modified by newbie333
Could someone please help me?
Its honestly up to you, whatever meets your needs. Firefox Sync is nice because it's built in, free, secure and easy. Lastpass may have other features that meet your needs better though, it's all something your personal experience is the only thing that can tell.
Thank you, sir!
I'm still thinking if I should use the new Firefox Sync. I hope I can make the decision soon.
If anyone else has any points I ought to think about before I use Firefox Sync I'd be really grateful!!!