Thunderbird login - easy to bypass
I set a password to login to Thunderbird.
However if you simply press the cancel button on the login (keep pressing it when it re-shows) the email app opens and all emails are visible.
How is this useful? I put a password on it to make email inaccessable when i am away from my PC.
At present anyone who has acess to my machine can open and view all my emails.
thanks
Все ответы (12)
This is a bug and I am reporting it this morning. Thank you,
david said
This is a bug and I am reporting it this morning. Thank you,
I look forward to a fix.
thanks
UPDATE. After research, this is NOT a bug. The documentation specifies that it only protects passwords. I regret the misunderstanding. However, there is an entry already filed to consider having the primary password protect messages, as you indicated you would like.
Thats very disapointing - I am going to have to find a more secure email app.
You might try TheBat, as I think it encrypts everything.
The most import think you can do is Secure your PC. Then you need not worry about Thunderbird. https://support.mozilla.org/en-US/kb/protect-your-thunderbird-passwords-primary-password#thunderbird:win10:tb115
Not really helpful when you have kids etc who occasionally want to use the pc etc
You are basically saying I cannot let anyone use the PC ever in case they open the mail client. Seeing as sensative information can be included in mail e.g medical data, then the client should be protected by at least a simple password.
Having separate access for children is a feature of Windows and highly recommended for situations such as yours. With separate accounts, you can prevent them from seeing your data. Doing that would ensure children would have no access to your data, whether in Thunderbird or elsewhere.
OK windows has separate logins, but in real life it is not effective in a single home PC environment.
It would mean logging out of the computer every time I moved away from it, which would shut down any open programs and/or work.
I respect your concern, but it's a possibility if you have a lot of sensitive material. However, we like to help people where we can. You might want to experiment with this FREE password utility at https://fspro.net/my-lockbox/ It will password protect any one folder for free - use it for the entire profile. It causes the folder to be hidden and you would need to unlock prior to starting Thunderbird and lock again when done. Otherwise, it would be difficult for an email client to protect all data components, since they are accessible outside the application. This utility eliminates the issue by hiding the folder. I did check the current status of the password control you prefer and it's been in discussion for over four years due to the many side questions it raises. That translates to me as a feature that is no on the immediate horizon. This will be my final comment, as this forum can do no more.
Thanks for that. I'll have a look
However in 99.99% cases just a simple password that would not allow the program to start would suffice. Most people who are just being nosey wouldn't be bothered digging into data files to read emails, however if presented with the emails with easy access they will read them.
I just don't understand why a password can't be added. Just to stop the program opening.
Are Thunderbirds data/achive files encrypted or plain text?
nemo1966 said
OK windows has separate logins, but in real life it is not effective in a single home PC environment. It would mean logging out of the computer every time I moved away from it, which would shut down any open programs and/or work.
Not at all. https://freewindowsvistatutorials.com/loginToWindows7AsDifferentUserSwitchUsers.php
If you really want proper security, Thunderbird isn't the place to enforce it.