Desktop Firefox has the option of using a Primary Password to protect your saved passwords. When a Primary Password is enabled, your saved passwords are encrypted and can not be accessed without entering the Primary Password. See Use a Primary Password to protect stored logins and passwords for more information.
How does my Primary Password work with Sync?
When using Sync, your Firefox account login is stored in the Firefox password manager. Your Primary Password must be entered before Sync can access your Firefox account, allowing syncing of your saved passwords and other browser data between your devices.
How are my passwords kept safe?
When you save website passwords, the Primary Password feature encrypts them before storing them on your computer. To Sync your passwords, you enter your Primary Password, Sync then re-encrypts them based on your Firefox account password, then sends them to Sync servers. The decrypted copies of your passwords are never transmitted online.
This means the Primary Password is specific to a single device and not your Firefox account. Each device can have a different (or no) Primary Password, and they are not synced between devices.
Tip: Increase protection by enabling a Primary Password on each device. See Use a Primary Password to protect stored logins and passwords.
What about Android and Apple's iOS?
Mobile versions of Firefox locally encrypt your passwords, but do so by relying on the built-in security of the device rather than a Primary Password. Your Firefox account password is required to connect to Sync, so each login can be re-encrypted in a way that other devices are able to decrypt.