Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

What type of encryption does the built-in password manager use?

  • 1 reply
  • 1 has this problem
  • 89 views
  • Last reply by TyDraniu

ouranos196
ouranos196
more options

I've been trying to know how secure is the built-in password manager in Firefox. On the web, some say it uses SHA-256, others SHA-1 with one iteration (wich would be awful!!!). If it's not secure enough, I will use another password manager.

I've been trying to know how secure is the built-in password manager in Firefox. On the web, some say it uses SHA-256, others SHA-1 with one iteration (wich would be awful!!!). If it's not secure enough, I will use another password manager.

Chosen solution

When using a master password, passwords are encrypted using Triple DES Encryption in CBC mode. This is OK.

The problem is, master password is encrypted using SHA-1 with 1 iteration. This is quite weak (see bug 524403).

You still can use another pass manager.

Read this answer in context 👍 1

All Replies (1)

TyDraniu
TyDraniu
  • Top 10 Contributor
more options

Chosen Solution

When using a master password, passwords are encrypted using Triple DES Encryption in CBC mode. This is OK.

The problem is, master password is encrypted using SHA-1 with 1 iteration. This is quite weak (see bug 524403).

You still can use another pass manager.

Modified by TyDraniu