An email account of someone I know was recently breached. They claim there was no electronic copy of the password anywhere. When I checked FireFox they had a Sync account which was set to sync passwords. In the saved passwords section I found that the webmail password was being saved. With that said I have two questions: 1. If someone was able to login to the Sync account, what preventative measures stop them from having access to the passwords? (it's worth mentioning, on the machine that Sync was enabled it did have a prompt to upgrade the Sync account - so if there was ever an older version of Sync it may have been running that) 2. Is there a way to track all IP addresses, or devices that the account has signed into in the past 30+ days? Thanks in advance!