Firefox (for android) saved my password as form info!
I went to log into Gmail on Firefox on my phone. I noticed that if I hit the "show password" button and then clicked on the box for entering the password, Firefox showed me my password as a suggestion, in plaintext, as if it were form data.
Some things to note:
- I have never saved any passwords on Firefox on my phone (nor have I ever allowed Firefox to save my Gmail password, even on other devices). When I went into "Manage logins" in the settings, Gmail was not there.
- I then decided to clear private data, and chose ONLY to clear "Form history". Sure enough, the Gmail password stopped showing up.
This is concerning to me! Am I misunderstanding the situation somehow, or is this a security problem?
Additional System Details
- User Agent: Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0
I think what happened is the problem is the form filler. Not the Password Manager. Each works separately.
Type about:preferences#privacy<enter> in the address bar. The button next to History, select Use Custom Settings.
At the bottom of the page, turn on Clear History When Firefox Closes. At the far right, press the Settings button. Turn on Cache and Form And Search History.
Right, I can personally avoid this issue by doing that. But shouldn't Firefox not save passwords in the form filler by default?
You would have to ask the developers about that. To the form filler, the input boxes are all the same. Just different names on each box.