master password request can be overcome by closing box repeatedly
I set a master password and found that by closing the box several times, it was ignored and i could get into accounts (with their login and password). This means security is almost non existent. Anyone any ideas?
All Replies (3)
When you cancel a master password prompt then the Password Manager (Software Security Device) should be locked and you shouldn't see names in the Password Manager.
- Options/Preferences -> Privacy & Security: Logins: "Saved Logins" -> "Show Passwords"
It is however possible that you have a special "remember me" cookie that makes the website recognize you without the need to enter username and password. When you remove the cookies from websites then this makes websites forget about you.
When you reopen tabs automatically then this includes cookies used by these tabs and you may still be logged in to websites on the next start.
Hi, yes I see about the cookie and I have removed it, but I would have thought that if you put a master password to be required when opening Mozilla Firefox, you should not be able to even access it when you close the password box.
With the MP canceled you should see an empty Password Manager window and Firefox shouldn't be able to fill passwords in as form on a website. This is separate from having a cookie that makes the website remember you.