All passwords that are saved in a profile are encrypted in the local profile when a master password is set. If a site uses encryption, then when logging into a site the password is essentially encrypted. (https)

Many thanks

Note that the passwords are always encrypted when saved to the logins.json file. It is only not safe because the encryption key is stored in the key3.db file and having access to this file is sufficient to decode the passwords. If you set a (strong) Master Password then an extra encryption level is added.

• https://support.mozilla.org/kb/create-secure-passwords-keep-your-identity-safe
• http://en.wikipedia.org/wiki/Password_strength

I have been on other un-namable browsers and have recently come back to Firefox and I am loving it.

Many thanks