All Products Community Forum

Today is 01.16.2026 Hi Volunteers, thank you for the service you are providing Thunderbird users.

I didn't see a topic called Security, so I chose Settings.

For Thunderbird version 146, what specific version of LDAP is being used?

Regarding which LDAP version is the most up to date, I found this: https://pkg.go.dev/github.com/go-ldap/ldap/v3@v3.4.12

My concern is about LDAP's security. I believe it is reasonable to think that the latest available version of LDAP would have the latest and most up to date security patches applied.

I would like to feel secure knowing I have the protection of the newest version of LDAP which affords the best security protection available for Thunderbird laptop version 146.

However I have been unsuccessful in determining if Thunderbird 146 is using this LDAP latest version. Could you help me learn if Thunderbird 146 is utilizing the latest version of LDAP that is available? Thanks in advance.

Yes I know I am a bit verbose.

Hello, I need help. A virus has entered my computer through an infected file. Possibly a trojan. And when Bitdefender antivirus scanned the whole computer, it found viruses. It offered to remove them. I removed them. But after this action, all the emails in my mailboxes became invisible. I can see the subject of the email, but I cannot see what is inside. The email is white. There are no functional buttons to forward or reply to the received mail. Attached files are also inaccessible. It also does not allow me to delete the message.

I can delete emails from my sent profile. I tried reinstalling Thunderbird. It didn't help. I tried moving my inbox profiles to another computer - no help. I have a feeling that there will be some virus file in the profile that prevents the contents of the email from being displayed. Incidentally, I get a similar picture when I have archived an email via the compacting function.

The fact that emails affected by the virus are inaccessible. Newly arrived emails are visible and I can delete them.

I hope that someone else has had a similar situation and knows how to solve it. I would be grateful for your help.

I am using Thunderbird with both Microsoft and Gmail accounts. My question is... is Microsoft able to see that i am using a Gmail account, and/or the account name/adress, and vise versa?

All of our email goes through Proofpoint. It has a feature that redirects all links to their URL Defense before allowing it to continue to the original destination. However, when the link is typed out in the email, Thunderbird pops up with the message that there is a Link Mismatch Detected and it lets the user go to the actual link instead of forcing it through the Proofpoint URL Defense. I need to disable that feature or create an exception for anything that redirects to Proofpoints URL.

Win 7 Thunderbird (newest version for Win 7, I believe)

Around the end of last year (2024), when I click"Get Messages" to retrieve emails I haven't downloaded yet, a window opens that looks exactly like the Yahoo log in account. As default, my email address is displayed, and I click "Next". Then the yahoo "Enter password" window opens. I am supposed to enter my password to proceed "Next". Here is where I stopped proceeding. I looked at the URL address and it says: https://tsdtocl.com/. It looked suspicious so I didn't go any further.

FYI, I have 2 email accounts. The second email account proceeds normally, retrieving emails I have not downloaded yet, automatically.

Furthermore, I installed Win 10 into a new partition and installed Thunderbird. I tried setting my email account, entered the necessary information, and after clicking "Continue", the same thing happens. A new window looking like "Yahoo log in Account" appears.

Am I doing something wrong here? Or am I safe to proceed with entering my password?

Thunderbird is configured to access my several email accounts.

Returning to my PC after several hours away not using it, I see a pop-up requiring me to sign in to one of those accounts. The account is a gmail account which I use about once a week. Is this suspicious? Should I be concerned?

[I have searched the but have only been able to find inquiries about 'master password' or 'password every time used']

Thank you.

I wonder if thunderbird (plus addons?) could help fight phishing in the following way. Say I need to check the authenticity of emails I get from Bob. Is there a way to

1) Get Bob to create digital signature (PGP?) and send it to me ahead of time in secure channel; I store this signature locally (on thunderbird?)

2) Bob sends me an email, with this signature

3) Upon receiving this email, thunderbird automatically verifies the signature against the locally saved one and confirms that the signature is correct

Note: I am looking for automatic verification of message/sender, NOT encryption.

If this can be done, do Bob also needs to use thunderbird (plus addons?), or is there a standard protocol for this (e.g. can this be done via gmail webinterface, outlook, etc?)

THANKS!

p.s. For (1), Bob can e.g. posts his signature on his webpage as well. But my main question is about (3).

سلام خسته نباشید خوب من کم سرمایه ندارم گوگل میاد ایمیل خودش رو تو کانکت شدن هر نرم افزار تحمیل میکنه سیستم های اطلاعاتی داخل کشور گوگل رو به عنوان بزرگترین باگ اطلاعاتی برای شهروندان ایرانی شناسایی کرده تا به الان هم با کانکت بودیم مشغول تحقیقات بودیم چه باید کرد برای استفاده از گوشی به طور کلی سرویس گوگل رو کنار گذاشته و از ایمیل ملی اگر قابل قبول هست و يا حتي ایمیل هات میل و اوت لوک استفاده کنیم من از کشور ایرانم

My browser later stop working telling me that they encounter an error it stop browsing but after restarting of the PC it started working. Please set and update my mozilla against such. It was talking about secure security. Please set it up for me.

I am trying to set up 2FA to access my emails in Thunderbird. There are several instruction on how to do this but none of them work. I can't find the settings they mention. Can you please help. A video would be helpful.

Recently I have started to see Thunderbird trying to insert passwords or Yubi key codes in the body of messages without my initiating that. I sent a message this morning and I deleted the codes, but T-Bird started re-inserting them.

Any idea what can cause this behaviour?

Thanks, Jim Darrough