Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

how different devices can decrypt same data ?

more options

it is said here that synced data is encrypted to save privacy and protect against identity theft . https://support.mozilla.org/en-US/kb/firefox-lockwise-and-privacy

but if the synced data is encrypted by device A and sent to mozilla server for saving, how does device B able to decrypted the data received from mozilla after signing in ? this can be possible only if the encryption happens at mozilla server side and not the device itself .

doesn't this means mozilla server as well able to decrypt the data and read it ? so you can read all my passwords i synced through you ?

it is said here that synced data is encrypted to save privacy and protect against identity theft . https://support.mozilla.org/en-US/kb/firefox-lockwise-and-privacy but if the synced data is encrypted by device A and sent to mozilla server for saving, how does device B able to decrypted the data received from mozilla after signing in ? this can be possible only if the encryption happens at mozilla server side and not the device itself . doesn't this means mozilla server as well able to decrypt the data and read it ? so you can read all my passwords i synced through you ?

Chosen solution

Your installation of Firefox or the Lockwise app uses your Firefox Account password to encrypt and decrypt the data. Mozilla has a hash of the password used to verify your login, but it does not have the password itself, so Mozilla cannot decrypt the data.

See: How Firefox Sync keeps your data safe even if TLS fails

Read this answer in context 👍 0

All Replies (1)

more options

Chosen Solution

Your installation of Firefox or the Lockwise app uses your Firefox Account password to encrypt and decrypt the data. Mozilla has a hash of the password used to verify your login, but it does not have the password itself, so Mozilla cannot decrypt the data.

See: How Firefox Sync keeps your data safe even if TLS fails