Firefox Password Manager - Alerts for breached websites

Firefox, Mozilla Monitor Firefox, Mozilla Monitor Ti ṣàfikún kẹ́hìn: 4 àwọn ọjọ́ tó kọjá 55% of users voted this helpful
Kò sẹ́ni tó ṣèraǹwọ́ láti túmọ̀ aròkọ yí rí. Bí o báti mọ bí ìsọdibílẹ̀ SUMO ṣe ń ṣiṣẹ́, bẹ̀rẹ̀ síní túmọ̀ báyì. Bí o bá fẹ́ kọ́ láti túmọ̀ aròkọ fún SUMO, jọ̀wọ́ bẹ̀rẹ̀ níbí.

When Firefox detects that a saved login may have been exposed in a known data breach, it shows a clear, private alert in your Firefox Password Manager. These alerts help you stay safe online by guiding you to change your password before anyone can misuse your account. Firefox uses secure, anonymous checks and never sends your saved passwords or login information to anyone—not even to Mozilla.

FirefoxPasswordBreach

How Firefox notifies about website breaches

Firefox checks the date of a known website breach against the date you saved a password for that website. If the website was breached after you saved your password, you’ll see this alert.

Vulnerable Password: This password has been used on another account that was likely in a data breach. Reusing credentials puts all your accounts at risk. Change this password. Go to (name of the site).

What the alert means

  • A website where you have a saved login experienced a known data breach.
  • Your saved password for that site may no longer be secure.
  • Firefox helps you act quickly by flagging the login and guiding you to update it.

Firefox will also check to see if you’ve reused any of these potentially vulnerable passwords with other logins you’ve saved to Firefox. The browser does this by creating an encrypted list of your breached passwords, then checking it against all saved passwords. Firefox does not keep logs of your plaintext passwords or know them.

Note: Firefox performs these checks locally and privately. Your passwords are never sent or shared.

Turn off website breach alerts

Disabling the feature also prevents Firefox from checking to see if you’ve reused these potentially vulnerable passwords on any of your other saved logins.

  1. In the Menu bar at the top of the screen, click Firefox and select Settings (or Preferences, in some cases).Click the menu button Fx89menuButton and select Settings.
  2. Select the Privacy & Security panel on the left.
  3. Scroll down to the Passwords section.
    Passwords panel - not simplified
  4. Deselect the checkbox for Show alerts about passwords for breached websites.
To see if your email address was part of a breach, sign up for Mozilla Monitor.
Warning: Disabling this feature also turns off Firefox’s password reuse checks and reduces your online safety.

Check if your email was in a breach

You can also use Mozilla Monitor to check if your email address appeared in any known data breaches. Just enter your email, and you’ll get a private report. It’s free and secure.

Related articles

These fine people helped write this article:

Illustration of hands

Volunteer

Grow and share your expertise with others. Answer questions and improve our knowledge base.

Learn More