Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Passwords seem to be UNPROTECTED on phone

  • No replies
  • 1 has this problem
  • 17 views
more options

Having very reluctantly upgraded FF on my phone, it's now on Daylight 82.1.1 I removed the master password before the upgrade. I now find when visiting a website login page, usernames and passwords are being filled in automatically for me. Previously I would have had to type the master password in order for that to work. On a desktop this is fine. But on a phone, likely to be lost, stolen or fiddled with, it's just unsafe. I thought FF was going to use the phone's security - prompting for a fingerprint or pin? This is not happening for me. The only time it requests fingerprint/pin is when clicking on Settings/Logins and passwords/Saved logins. That's great as far as it goes, but surely it ought to do the same check before auto filling passwords? Don't really care if this is a bug or by design, there must be a security check before allowing use of stored passwords. Make it optional if some folks disagree, but personally I can't use or trust FF like this.

Having very reluctantly upgraded FF on my phone, it's now on Daylight 82.1.1 I removed the master password before the upgrade. I now find when visiting a website login page, usernames and passwords are being filled in automatically for me. Previously I would have had to type the master password in order for that to work. On a desktop this is fine. But on a phone, likely to be lost, stolen or fiddled with, it's just unsafe. I thought FF was going to use the phone's security - prompting for a fingerprint or pin? This is not happening for me. The only time it requests fingerprint/pin is when clicking on Settings/Logins and passwords/Saved logins. That's great as far as it goes, but surely it ought to do the same check before auto filling passwords? Don't really care if this is a bug or by design, there must be a security check before allowing use of stored passwords. Make it optional if some folks disagree, but personally I can't use or trust FF like this.