Is this about logging out of a Sync account?

Logging out from Sync doesn't remove data that got added via Sync. You will have to clear this data yourself if you want it removed.

• https://support.mozilla.org/en-US/kb/delete-browsing-search-download-history-firefox
• https://support.mozilla.org/en-US/kb/forget-button-quickly-delete-your-browsing-history

I would like you to work out a way to not store my passwords in the browser cache

Does anyone on this forum get the decidedly sinking feeling that Mozilla support don't really understand the problem, 'cos the answers sure make it seem that way. Very simply put. Firefox Browser 72.0.2 has a large security hole that leaves your login accessible when you log out. That can't be right. Workarounds can't be right either. As for syncing or any other fangled technicalities, they are unimportant if the basic browser does not achieve a secure environment.

Hi NickW, support volunteers fully understand the situation. We are not in a position to undo the change, we can only offer you workarounds, and the suggestion not to use Sync on a shared PC if you don't like the workarounds.

Solution was erroneous - Setting Master Password only hides your passwords. It does not solve that your bookmarks and history remain after you log out. Whether or not you've been using sync. Sucks....

albert.hillier said

I set Firefox to not remember passwords. But it logs me in to my websites when my password manager is not running! Only after I clear the Firefox cache is it 'normal', but then I have to click all of the websites' cookies agreements every time, which is annoying. This can't be right

Sorry Albert, I do not have a solution.

Rootkit attack my comp need help

Hi yurymast, try the specialized forums listed in this article: Troubleshoot Firefox issues caused by malware. They can walk you through the use of advanced diagnostic and cleanup tools.

A detail like a website remembering you (log you in automatically) is stored in a cookie and this has nothing to do with the Password Manager or with the disk cache although in some cases you may have links with a session ID in the cache that may still be valid if you didn't explicitly logged out to the server.

NickW said

Create a separate Master Password The answer seems quite painlessly simple (if a bit unnecessarily convoluted) once you've done it - read this or just look at the images below:

1. Log in to your account
2. Click on the menu (3 bars) on the top right
3. Select the Logins and Passwords menu which opens a new Logins and Password tab.
4. Click on the Open Menu (3 dots) on the top right
5. Select Options which opens a new Options tab
6. You should now see section entitled Logins and Passwords
7. In the Logins and Passwords section select the Use a Master Password check box - the Change Master Password window is displayed. Complete the fields and you're done.

NB be careful afterwards as if you then later on un-check the Use a Master Password check box you will be asked to supply your master password and it will then be deleted - you'll have to reenter a new password using the button instead. It does not just disable the password it removes it. NB: Don't understand why Firefox has such an elaborate menu structure, don't understand why Firefox requires two passwords.

Ok, so what your saying is creating a browser-specific master password protects synced data? This could work for passwords, but it wont work with bookmarks, for example. So this is also a work around, if you can do it -- I can think of a quite few scenarios when one can not do it. Did not test it, but could prevent other people using their Sync too?

jscher2000 said

Hi NickW, support volunteers fully understand the situation. We are not in a position to undo the change, we can only offer you workarounds, and the suggestion not to use Sync on a shared PC if you don't like the workarounds.

Does volunteer community have any influence on the devs, so this security and privacy mistake mayhaps would be reversed in (near) future?

legioonalainen said

jscher2000 said

Hi NickW, support volunteers fully understand the situation. We are not in a position to undo the change, we can only offer you workarounds, and the suggestion not to use Sync on a shared PC if you don't like the workarounds.

Does volunteer community have any influence on the devs, so this security and privacy mistake mayhaps would be reversed in (near) future?

Getting rid of that feature wasn't done lightly. There was a Bug report filed about that feature which was found to be confusing by some users; after due consideration the consensus among the developers was to discontinue that feature thus closing that Bug report.

You can use Help > Submit Feedback ... and complete the form - https://qsurvey.mozilla.com/s3/FirefoxInput/ - to let Mozilla know how you feel about the removal of that feature.

legioonalainen said

Ok, so what your saying is creating a browser-specific master password protects synced data? This could work for passwords, but it wont work with bookmarks, for example. So this is also a work around, if you can do it -- I can think of a quite few scenarios when one can not do it. Did not test it, but could prevent other people using their Sync too?

Response to Legioonalainen

Hi legioonalainen, Nope, I got that wrong - too much enthusiasm. Master Password does not fix the problem. I have subsequently found that setting the Master Password ONLY prevents people from accessing your password data. Your tabs remain regardless whether you are logged out All your history are freely available for anyone to access unless you first set the history to auto delete and then clear the cache of existing history and log out. Nothing to do with Sync or shared PC.

Addendum: Rather sheepishly, I have just noticed that the same happens with Google's Chrome (although it does not require a Master Password to prevent passwords/email addresses from being displayed.

Seriously, this is a goat-screw that FF made.

I logged into my son's new laptop, downloaded a bunch of software for him, did some system tweaks, etc. Then I gave him the laptop, and when he logged me out - all my bookmarks and 532 login passwords STAYED ON HIS LAPTOP!!!

I was sure that FF was supposed to flush my data, so I figured that maybe if he logged in with his FF account, it would clear everything out - NOPE, now his account has all my stuff added to it!

Which means that even if he uninstalls FF and wipes all FF data on his laptop, the minute he logs back in FF is going to drag everything back in.

STUPID STUPID STUPID!!!

And I've loved FF for years - but now you have to go and stab me in the face??? Grrrrrrrrr

I'm not marking this solved until they fix what I consider a huge privacy hole.

When I log in with a sync account the browser imports all your data, but if I log out it doesn't even give you a warning that all your passwords and bookmarks and history will remain there.

jococoj said

I'm not marking this solved until they fix what I consider a huge privacy hole. When I log in with a sync account the browser imports all your data, but if I log out it doesn't even give you a warning that all your passwords and bookmarks and history will remain there.

Yep, sorry about that mate - did not know enough, tried to be clever and ended up on my arse. Chrome has the same problem just that it never registered with my limited brain. Not sure what Edge does - think it is linked to your login to Windows.

NickW said

jococoj said

I'm not marking this solved until they fix what I consider a huge privacy hole. When I log in with a sync account the browser imports all your data, but if I log out it doesn't even give you a warning that all your passwords and bookmarks and history will remain there.

Yep, sorry about that mate - did not know enough, tried to be clever and ended up on my arse. Chrome has the same problem just that it never registered with my limited brain. Not sure what Edge does - think it is linked to your login to Windows.

You tried to help and I appreciate all your efforts. The bottom line is I believe this should be solved by the devs.

My firefox signin is wrong. How do I fix it?

My signon is wrong. How do I fix it?

Hi Lew, since your question is different, I think it's a good idea to continue that discussion in your new thread:

https://support.mozilla.org/questions/1278648