How Firefox securely saves passwords

還沒有幫人幫忙翻譯這篇文章。若您已經知道如何翻譯 SUMO 內容,您可以直接開始翻譯。若您想了解如何翻譯 SUMO 文章,請從此處開始

Firefox Accounts and Firefox Sync allow you to save and sync your logins as well as let you know if any of your passwords are vulnerable. They both also protect your passwords with encryption so that even Mozilla can’t see them. Meanwhile, Firefox Lockwise checks your saved websites against a database of breached websites to let you know if your logins are vulnerable. For more information, see Firefox Lockwise - Alerts for breached websites.

Firefox Sync

If you have Firefox Accounts and enabled the Sync functionality, your sync login data (usernames, passwords, hostnames) is fully encrypted once it's created and/or modified. However, Mozilla cannot decrypt your usernames and passwords when they are stored on the sync server.

If you forget your Firefox Accounts email and password, Mozilla will not be able to recover your sync data as we do not have access to it.

Firefox Desktop

Firefox Desktop encrypts your passwords locally in your user profile directory using a logins.json file. Firefox Desktop uses simple cryptography to obscure your passwords. Mozilla doesn’t have the ability to see passwords, but Firefox Desktop does decrypt the password locally so that it can enter them into form fields.

For the best security, use a Primary Password to encrypt your passwords. To learn more about how Firefox saves and stores your logins and passwords, see these articles:

Technical details (for advanced users)

For technical details about Firefox Sync and Firefox Accounts security, see:




Illustration of hands