All Products Community Forum

Someone has created Mozilla accounts using several of my company's openly available email accounts. I can't figure why. Anyone have an idea why? I know this because all three accounts received the following email message from Mozilla: "Welcome to Mozilla! A few days ago you created a Mozilla account, but never confirmed it. Please confirm your account in the next 15 days or it will be automatically deleted. Don’t miss out on the browser that puts you and your privacy first."

Moderator note: This question has been edited to remove extra newlines.

Hello, If I had to sign into my gmail account in order to download Firefox browser, does that mean that my new tablet (that did not have my gmail identity on it before) is now fully enmeshed with the Google identity, even though I will not use it on this new tablet?

I received an email from breach-alerts@mozilla.com informing me that Mozilla Monitor⁩ discovered a data breach that includes my personal information: Unfortunately, I don't know if this is a legitimate email from Mozilla. Can anyone confirm if it is or is not?

Thanks

It recently came to my attention that Gmail is using my (and others) emails to train their AI to provide "overviews" for email threads. I didn't find that in any of the recent Agreement changes so feel safe is stating Alphabet/Google never obtained my permission for this training. I'm not a fan of the far-flung use of AI and the mounting examples of how horrendously Google AI performs hasn't done anything to relieve my concerns.

I began a search for a better, reliable email client and there is a depressing shortage of them that fulfill the average email users' needs. Thunderbird looks pretty good but reading through the Help section, Community Forum questions and just general articles hasn't clarified a couple of questions I have.

1. Is Thunderbird a comprehensive email client, independent of other clients, or does it provide service by partnering with another client?

2. Does Thunderbird utilize AI for any purpose that requires the "review" and storage of individual users' emails?

Many thanks, MarilynB

2019 MacBook Pro

For about the past 10 days or so Tbird has been presenting me with a request for my user name and password for, i am assuming, inclusion as an added account. They want

The problem is that in have no idea who caldav is or where they got my link to Tbird. My concern is that this may well be malicious. They want me to authenticate with username and password. What user name and what password?

Does anyone in the forum know what this is all about and how i can get them permanently excluded? With all the fake / criminal challenges on the net these days, i am very nervous (77 years old).

Any help would be really appreciated. Thank you

Assuming that I don´t want any Google server to track me what could I click in the attached? It's a nice feature but as it is not clear what the last three options do a bit of a guess.

I have received an email from what looks like Mozilla, it says that there has been a massive data breach and my details were compromised. I'm checking to verify if this is correct.

Today is 01.16.2026 Hi Volunteers, thank you for the service you are providing Thunderbird users.

I didn't see a topic called Security, so I chose Settings.

For Thunderbird version 146, what specific version of LDAP is being used?

Regarding which LDAP version is the most up to date, I found this: https://pkg.go.dev/github.com/go-ldap/ldap/v3@v3.4.12

My concern is about LDAP's security. I believe it is reasonable to think that the latest available version of LDAP would have the latest and most up to date security patches applied.

I would like to feel secure knowing I have the protection of the newest version of LDAP which affords the best security protection available for Thunderbird laptop version 146.

However I have been unsuccessful in determining if Thunderbird 146 is using this LDAP latest version. Could you help me learn if Thunderbird 146 is utilizing the latest version of LDAP that is available? Thanks in advance.

Yes I know I am a bit verbose.

Today, using Firefox--or at least what i think is Firefox--i checed session history while logged into my mega.nz account. It lists 2 instances, one of which is for 3 days prior when I originally set up the Mega account using the Mega app, and the other is for yesterday when I entered the account using the FF browser--or, again, what i think is the FF browser. What's curious is that it shows i was using the Chrome browser, and that I'm apparently still using this browser as it's listed as the "Current" session. How can this be? While I have the Chrome app on my phone, I disabled it long ago and have never used it, and most certainly did not use it during the time and activities in question. I have long speculated that I have been hacked and that my phone is sometimes (always?) controlled by this hacker, though no solid proof. Assuming the hacker uses Chrome, could this be reflecting their using the Chrome browser, as opposed to the FF browser, which I'm currently using (or think im using)? In other words, is this the proof of a hack? Or is this a glitch within Mega, mistakingly listing Chrome as my browser?

I am constantly getting messages in quick messages to clear my search history! This is supposed to happen automatically when i close the site and in fact sais it has been cleared. I cant ever find the last sites i visited but it is rather disturbing to think that someone is seeing my search history without my authorization! So tell me squarely ,why do i keep getting that disturbing message?

Dear Thunderbird Development Team

I'm a regular Thunderbird user. I'd like to provide feedback regarding security concerns regarding the UI specifications of the Android version of Thunderbird.

Currently, Thunderbird for Android displays the sender's "display name only" on the email list screen, making the sender's actual email address invisible at all times.

I feel this specification increases the following risks, particularly in smartphone environments:

- Anyone can freely forge display names. - Phishing scams posing as financial institutions, e-commerce sites, and official support are common. - Users often rely on the list screen or notifications to determine the content of emails.

As a result, a UI that makes it difficult to determine whether an email is from a legitimate sender at the list screen level can become a breeding ground for phishing scams.

The PC version of Thunderbird allows for detailed header display, etc., and I'm disappointed that the mobile version of Thunderbird, despite being the same Thunderbird, is at a disadvantage in terms of security.

I would appreciate it if you could consider the following improvements.

- Setting to always display "display name + email address" on the email list screen