All Products Community Forum

When I attempt to add a Gmail account, I get this error - "Unable to login at server. Probably wrong configuration, username, or password"

Below are the steps with screenshots: - checked for no cookies to prevent Google from asking for an actual login - no stored google passwords - didn't put in my password on setup - TB finds the available configuration - prompted to login at google - add google password - allow access - error message

I have restarted Thunderbird. I have checked for updates (even though I have it on auto-update).

Are there settings on my Google or Gmail account that could prevent this from working?

Hello. I know how to define a server certificate exception to avoid browser warnings in case of certificate issue with a website (see attachment). However, I'd like to apply that exception for all users with access to my machine using a GPO (for user or local machine). This is also a requirement in my work where many users run Firefox from a server and the face browser warnings all the time (related to self-signed certificates) so it would be great to apply an exception for all users through a GPO specifying the self-signed certificate warning we want Firefox to ignore. Thanks.

Hello,

I process phishing URL's,

I have recently come across URL's that make use of a BLOB: syntax on the URL:

blob:https://bolig.botik.dk/16c8c011-0fa5-4ba0-a10f-ed7675055cc6

You can see an example of the Phishing URL in this PhishTank entry:

https://phishtank.com/phish_detail.php?phish_id=9118779

That URL then re-directs to the above "BLOB" URL.

My understanding is that it is "locally" generating the phishing website, similar to an old fashioned about: syntax, however it's not clear what the significance of bolig.botik.dk URL is - loading that URL without the BLOB: prefix causes an error

Can someone explain:

1) What is the BLOB: syntax, and 2) what would be reported to have the phishing URL removed in the above example?

I received an email from breach-alerts@mozilla.com informing me that Mozilla Monitor discovered a data breach that includes my personal information: Unfortunately, I don't know if this is a legitimate email from Mozilla. Can anyone confirm if it is or is not?

Thanks

I signed into one of my financial accounts and it said the sign in was with firefox windows 10. I have windows 11 on my computer. Is this a security issue? Fire fox says i am on the latest version

Hi our Kaspersky detected objects but unfortunately our antivirus can't delete all the detected. I try to uninstall the thunderbird but still unable to delete the virus's message.

Hope get the assist for your team.

thank you

Hello,

I have saved message templates that I use. Each one also has a footer (which I save as an .html file).

When I use this template to send a message, the image in the footer doesn't load and I get the message: Thunderbird has blocked the file from loading in this message.

When I click UNBLOCK, nothing happens. The image still doesn't get added. It's a very small image from my footer/signature. 'When I compose a new message, I don't have this problem' – the image in the footer loads and is sent to the recipient. This problem occurs when I try to send a message saved in the templates. There's no way to "unblock the image" and send it.

Hello, I've come across a rather strange problem. I have a phplist mailing list (on domain1). When sending emails, I usually also add an image (as a link to the image). Since the beginning of June, however, I've noticed that Thunderbird doesn't display the images added in this way. Instead of the image, it displays an empty frame (a completely empty frame without any tags). Even if "Allow remote content in messages" is checked in the settings. Other email clients (outlook, gmail, roundcube) have no problems and display images without any problems. However, if I put the image on another domain (domain2) and put a link to this image in the email, Thunderbird also displays it. So: it doesn't display the image from domain1, where I have the mailing list, but it displays the same image from domain2 (in the same email from the same mailing list from domain1). Is it possible that Thunderbird is blocking the display of images from a certain domain?

Dear Thunderbird Development Team

I'm a regular Thunderbird user. I'd like to provide feedback regarding security concerns regarding the UI specifications of the Android version of Thunderbird.

Currently, Thunderbird for Android displays the sender's "display name only" on the email list screen, making the sender's actual email address invisible at all times.

I feel this specification increases the following risks, particularly in smartphone environments:

- Anyone can freely forge display names. - Phishing scams posing as financial institutions, e-commerce sites, and official support are common. - Users often rely on the list screen or notifications to determine the content of emails.

As a result, a UI that makes it difficult to determine whether an email is from a legitimate sender at the list screen level can become a breeding ground for phishing scams.

The PC version of Thunderbird allows for detailed header display, etc., and I'm disappointed that the mobile version of Thunderbird, despite being the same Thunderbird, is at a disadvantage in terms of security.

I would appreciate it if you could consider the following improvements.

- Setting to always display "display name + email address" on the email list screen

02 Oct. 2025

Recently, some automatic updates were made to my Dell desktop. I assume they were updates to the Windows 11 OS.

The updates also caused some changes to my Thunderbird e-mails. The incoming e-mails are formatted differently. I used to get a message, saying that "remote content" in some incoming e-mails had been blocked. I was given the option to show remote content in the incoming e-mail. Now, I no longer have the option to "show remote content".

Please tell me how I can recover the option to "show remote content" on incoming e-mails.

Thank you.

Connie Yanicka

cyanicka46@gmail.com

I have been using Thunderbird since it was Netscape. (that's how old I am)

In all that time, I have NEVER had a password for Thunderbird. I have never even seen an option to set up a password for Thunderbird.

I thought that maybe if there were a subscription option available now, then I would be able to subscribe, get a proper personal account, make a password for it, and once again be able to use Thunderbird for email management.

I WISH! If anyone knows the URL for a Thunderbird subscription page, please send the URL, because after much searching, I still haven't found one.

Hello,

Our organization is attempting to implement a Conditional Access policy that restricts access to certain websites to Intune joined devices only. The error message mentions that I need to enable a setting from within Firefox called Windows SSO, mentioned here: https://support.mozilla.org/en-US/kb/windows-sso. This setting is already enabled and I am still getting an error.

Is there anything else that could be causing this?

When I search the internet using the safari app, Is Firefox focus working in the background…. Or do I search using the Firefox focus app and it used Safari??? Can you explain how best to use the internet so that Firefox focus adds more security?

Today is 01.16.2026 Hi Volunteers, thank you for the service you are providing Thunderbird users.

I didn't see a topic called Security, so I chose Settings.

For Thunderbird version 146, what specific version of LDAP is being used?

Regarding which LDAP version is the most up to date, I found this: https://pkg.go.dev/github.com/go-ldap/ldap/v3@v3.4.12

My concern is about LDAP's security. I believe it is reasonable to think that the latest available version of LDAP would have the latest and most up to date security patches applied.

I would like to feel secure knowing I have the protection of the newest version of LDAP which affords the best security protection available for Thunderbird laptop version 146.

However I have been unsuccessful in determining if Thunderbird 146 is using this LDAP latest version. Could you help me learn if Thunderbird 146 is utilizing the latest version of LDAP that is available? Thanks in advance.

Yes I know I am a bit verbose.

Yesterday there was a 4 hour outage at AOL. I use Thunderbird to access my AOL account. When I discovered the outage, I check my Windows 10 hard drive where my Thunderbird emails are stored and it was empty. Not only was my INBOX empty but every saved folder, delete folder, trash folder, etc. Once AOL was operational, all of my emails reappeared on my hard drive. Everything appears to have been recovered without me doing anything. My question is: who has the ability to delete files from my hard drive without me specifically doing so either manually or through the Thunderbird app?

Hi, I just noticed that my computer has been infected by a trojan called "HEUR:Trojan.VBS.SAgent.gen", and I can't remove it via Kapersky...The trojan is found in the inbox file in Thunderbird. So it's not a file that I can remove (it's all code). Kapersky stated that these two files are the source of the Trojan (they are not found as an e-mail attachment in my inbox, it's all code in the inbox file in Thunderbird):

P000009384:Emirates_Marble-pdf.gz and P000009384:Emirates_Marble-pdf.vbs

So I'm simply wondering how I should go about to remove this trojan from my computer?

Source: https://threats.kaspersky.com/en/threat/HEUR:Trojan.VBS.SAgent.gen/

This is not the first time you have sent an email to me indicating I should "View all sites where your info is exposed", and each time I receive your emails the sites you suggest are sites I have never seen before, let alone logged into with a password.

I use a Password Organizer Book, with all of my logins and passwords for each site I use. I do not use a password app, and have NEVER used a password app. Each time I go to the website you suggest, It's always a site I have never seen before so it would be impossible to login and change the password. I always check my Password Organizer Book to make sure.

I don't know what you want me to do since I cannot login to the website you are suggesting. Is there action I should be taking? I don't know what it would be, but if you know please let me know.