Last updated:
1 day ago
Your Mozila account syncs your passwords, bookmarks and history across multiple devices. If you notice suspicious activity on your Mozilla account (like someone signing in from an unknown device), there are steps you can take to prevent further access to your information.
First, change your Sync password from a synced computer
This first step will prevent devices with your old Mozilla account password from connecting to the Sync server and getting all of the new passwords that you will have to create in the next section.
- (In Firefox for desktop) Click the menu button
to open the menu panel.
- Click your Mozilla account name or email address (or click ).
- Click
- Alternatively, go to Mozilla account Sign in.
- On the Mozilla account page, scroll down to the Security section and click the button next to Password.
- Follow the steps to enter your old and new passwords, then click to finish.
When you open Firefox on another connected device, it will prompt you to enter your new Mozilla account password. Or, you can update your other connected devices with the new password as follows:
- Disconnect your other devices from your Mozilla account by following these steps.
- Reconnect these same devices by following these instructions.
Second, change all of your website passwords from a synced computer
This part is more time consuming but important. If you don't change the passwords for websites that store sensitive or personal information, such as bank accounts, email accounts and social media accounts, it would still be possible for someone else to log in to your account using the existing already synced password.
See Choose a strong password for an easy way to create better passwords.
Review your passkeys
If you use passkeys with your Mozilla account, review them as part of your account security check.
A passkey added by someone else could allow access to your account without using your password.
To review your passkeys:
- Sign in to your Mozilla account.
- Open .
- Go to > .
- Review the list of registered passkeys.
Each passkey shows information such as:
- Its name
- When it was created
- When it was last used
If you see a passkey you don't recognize:
- Delete the passkey immediately.
- Change your Mozilla account password.
- Review any linked Google or Apple accounts.
- Review your account's two-step authentication settings.
For more information, see Use a passkey to sign in to your Mozilla account.
