X
Tap here to go to the mobile version of the site.

Support Forum

are passwords encrypted

Posted

1) Are passwords encrypted when being saved in Firefox? 2) When selecting Master Password do existing passwords become encrypted or just ones saved after activation?

1) Are passwords encrypted when being saved in Firefox? 2) When selecting Master Password do existing passwords become encrypted or just ones saved after activation?

Chosen solution

All passwords that are saved in a profile are encrypted in the local profile when a master password is set. If a site uses encryption, then when logging into a site the password is essentially encrypted. (https)

Read this answer in context 4

Additional System Details

Installed Plug-ins

  • Adobe PDF Plug-In For Firefox and Netscape 10.1.13
  • Citrix Online App Detector Plugin
  • Version 5.38.6.0
  • Google Update
  • Intel web components for Intel® Identity Protection Technology
  • Intel web components updater - Installs and updates the Intel web components
  • NPRuntime Script Plug-in Library for Java(TM) Deploy
  • Next Generation Java Plug-in 11.25.2 for Mozilla browsers
  • The plugin allows you to have a better experience with Microsoft SharePoint
  • NPWLPG
  • The QuickTime Plugin allows you to view a wide variety of multimedia content in Web pages. For more information, visit the QuickTime Web site.
  • Shockwave Flash 16.0 r0
  • 5.1.30514.0
  • VLC media player Web Plugin 2.1.3

Application

  • Firefox 34.0.5
  • User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0
  • Support URL: https://support.mozilla.org/1/firefox/34.0.5/WINNT/en-US/

Extensions

  • Adblock Plus 2.6.6 ({d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d})
  • Context Search 0.6.3 ({902D2C4A-457A-4EF9-AD43-7014562929FF})
  • Dictionary Extension 3.0.12.1 (jid0-raWjElI57dRa4jx9CCiYm5qZUQU@jetpack)
  • Microsoft .NET Framework Assistant 1.3.1 ({20a82645-c095-46ed-80e3-08825760534b})
  • Troubleshooter 1.1a (troubleshooter@mozilla.org)
  • View in Office Online Viewer 1.3.0 (viewinofficeapps@huhsiaotao)
  • Online Accounts Extension 1.0 ({41ecbc0b-34d5-4cd4-935f-253a30e2cb7e}) (Inactive)
  • Online Accounts Extension 1.1 ({d4da7309-b89a-45ec-8ebb-cfb2ae13618b}) (Inactive)
  • Skype Click to Call 7.3.16540.9015 ({82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}) (Inactive)

Javascript

  • incrementalGCEnabled: True

Graphics

  • adapterDescription: Intel(R) HD Graphics 4000
  • adapterDescription2:
  • adapterDeviceID: 0x0166
  • adapterDeviceID2:
  • adapterDrivers: igdumd64 igd10umd64 igd10umd64 igdumd32 igd10umd32 igd10umd32
  • adapterDrivers2:
  • adapterRAM: Unknown
  • adapterRAM2:
  • adapterSubsysID: 06821025
  • adapterSubsysID2:
  • adapterVendorID: 0x8086
  • adapterVendorID2:
  • direct2DEnabled: True
  • directWriteEnabled: True
  • directWriteVersion: 6.2.9200.16571
  • driverDate: 3-26-2012
  • driverDate2:
  • driverVersion: 8.15.10.2712
  • driverVersion2:
  • info: {u'AzureCanvasBackend': u'direct2d', u'AzureFallbackCanvasBackend': u'cairo', u'AzureContentBackend': u'direct2d', u'AzureSkiaAccelerated': 0}
  • isGPU2Active: False
  • numAcceleratedWindows: 3
  • numTotalWindows: 3
  • webglRenderer: Google Inc. -- ANGLE (Intel(R) HD Graphics 4000 Direct3D9Ex vs_3_0 ps_3_0)
  • windowLayerManagerRemote: True
  • windowLayerManagerType: Direct3D 11

Modified Preferences

  • accessibility.typeaheadfind: True
  • accessibility.typeaheadfind.flashBar: 0
  • browser.cache.disk.capacity: 358400
  • browser.cache.disk.smart_size.first_run: False
  • browser.cache.disk.smart_size.use_old_max: False
  • browser.cache.frecency_experiment: 4
  • browser.places.smartBookmarksVersion: 7
  • browser.sessionstore.upgradeBackup.latestBuildID: 20141126041045
  • browser.startup.homepage: http://www.bing.com.au/
  • browser.startup.homepage_override.buildID: 20141126041045
  • browser.startup.homepage_override.mstone: 34.0.5
  • browser.tabs.warnOnClose: False
  • dom.mozApps.used: True
  • extensions.lastAppVersion: 34.0.5
  • general.useragent.extra.microsoftdotnet: ( .NET CLR 3.5.30729; .NET4.0E)
  • gfx.direct3d.last_used_feature_level_idx: 0
  • media.gmp-gmpopenh264.lastUpdate: 1417241341
  • media.gmp-gmpopenh264.version: 1.1
  • media.gmp-manager.lastCheck: 1421130072
  • network.cookie.cookieBehavior: 3
  • network.cookie.lifetimePolicy: 1
  • network.cookie.prefsMigrated: True
  • places.database.lastMaintenance: 1421210789
  • places.history.expiration.transient_current_max_pages: 101597
  • plugin.disable_full_page_plugin_for_types: application/pdf
  • plugin.importedState: True
  • privacy.sanitize.migrateFx3Prefs: True
  • security.disable_button.openDeviceManager: False
  • storage.vacuum.last.index: 1
  • storage.vacuum.last.places.sqlite: 1421037929

Misc

  • User JS: No
  • Accessibility: No
guigs 1072 solutions 11697 answers

Chosen Solution

All passwords that are saved in a profile are encrypted in the local profile when a master password is set. If a site uses encryption, then when logging into a site the password is essentially encrypted. (https)

All passwords that are saved in a profile are encrypted in the local profile when a master password is set. If a site uses encryption, then when logging into a site the password is essentially encrypted. (https)

Helpful Reply

Many thanks

Many thanks
cor-el
  • Top 10 Contributor
  • Moderator
17267 solutions 156053 answers

Helpful Reply

Note that the passwords are always encrypted when saved to the logins.json file. It is only not safe because the encryption key is stored in the key3.db file and having access to this file is sufficient to decode the passwords. If you set a (strong) Master Password then an extra encryption level is added.

Note that the passwords are always encrypted when saved to the logins.json file. It is only not safe because the encryption key is stored in the key3.db file and having access to this file is sufficient to decode the passwords. If you set a (strong) Master Password then an extra encryption level is added. * https://support.mozilla.org/kb/create-secure-passwords-keep-your-identity-safe * http://en.wikipedia.org/wiki/Password_strength

Question owner

I have been on other un-namable browsers and have recently come back to Firefox and I am loving it.

Many thanks

I have been on other un-namable browsers and have recently come back to Firefox and I am loving it. Many thanks