Firefox allows you to securely

store usernames and passwords 

for websites in its Password Manager.

When you visit one of the websites again, 

Firefox automatically fills in the

username and password to log you in.

If you need to find out what your password is for a specific website for

which you saved your logon information,
you can easily do so. To view your saved
passwords in Firefox, 

select Options from the Firefox menu.

https://www.howtogeek.com/111555/view-and-delete-stored-passwords-in-firefox/

I think this help for you, thank you :-)

Dinushi, thanks for your attempt to address this issue.

It's unfortunate that I did not make clear enough that I am aware of the trivial steps to display and delete stored passwords. Of course I did that before setting up the password save shield again. In fact it's the obvious and first thing I do when I start up Firefox and find it it offering the filled-in login details.

Hoping for the community to address the actual question I put.

Regards, Akebinko

Is your father changing the settings to remember the passwords?

FredMcD,

ss I wrote: he claims he did nothing of the sort.

And I don't think he goes into the settings. Even if he did, it would not be easy to find this setting. Mozilla made a good job of making this very intransparent over the past years' releases even for me who works in IT support.

I have a hunch that my dad may be offered an option to reset Firefox and just clicks it, not knowing what it does. Or chosses reset with addons disabled and resets FF (not probable though as the addons are still around).

Regardless, I am asking y'all for a way to make the exception list more permanent so that it cannot be edited/cleared.

Regards, Akebinko

Maybe these would be helpful:

https://github.com/mozilla/policy-templates#passwordmanagerenabled https://github.com/mozilla/policy-templates#offertosavelogins

Is this only about block exceptions for specific hosts (domains) and do you want to allow storing passwords for other domains?

I don't think that it is possible to lock exceptions, so even if you would force an exception when you start Firefox it would still be possible to go to the exception manager window and remove the exception or clear the Site Preferences via "Clear Recent History".

See:

• https://support.mozilla.org/en-US/kb/customizing-firefox-using-autoconfig

Note that you need to disable the sandbox via autoconfig.js to be able to run JavaScript.

// autoconfig.js needs to start with a comment line and uses Unix line endings (LF)
pref("general.config.filename", "autoconfig.cfg");
pref("general.config.obscure_value", 0);
pref("general.config.sandbox_enabled", false);

// autoconfig.cfg needs to start with a comment line
Components.utils.import("resource://gre/modules/Services.jsm");
var origin = "https://example.com";
Services.logins.setLoginSavingEnabled(origin, false);

Hi TyDraniu,

this is an interesting list of policies, thank you.

As I understand these are used when deploying FF to clients, e.g. in an enterprise environment. This could apply e.g. if I chose to reinstall FF on every startup (rather than simply copy a profile from backup) and have FF build the profile with profile settings defined by these policies. I think this solution is even more complex.

Also, only a fraction of these policies are usable for the 70.x release. Of course I can revert to 68esr (which I myself use on my own PC to leave the multiple addons I choose to use a bit more time to live before yet another FF release change disables them) but even then most policy entries stop at 60.

OfferToSaveLogins only works up to FF 60. The closest I can find with respect to my task is OfferToSaveLoginsDefault (up to 70), but I assume this will only switch Logins to On and Off and they can still be changed later on. I am confident that my switching off password saving manually will do the trick fro now, since I don't trust my dad to venture into settings-land.

I hoped there was a hidden config key which I could use in a similar way in Firefox as I can use a registry key in Windows 10 to lock the Windows 10 task tray and prevent my dad from pushing that around (URL to a German webpage on the matter ) .

Regards, Akebinko

Policies should work for all Firefox versions (ESR 60 and ESR 68 and releases including the current release ) above the minimum that is specified although some policies may only work on ESR and not on the release channel.

Hi cor-el!

cor-el said

Is this only about block exceptions for specific hosts (domains) and do you want to allow storing passwords for other domains?

exactly!

Thanks for the pointer to autoconfig. I will take a look at it and see if and how I can use it.

Also thanks for correcting my assumption that policies hold for a minimum, not maximum version!

I believe the autoconfig is the way to go...

Regards, Akebinko

It is possible to hide the button to open the exception window with code in userContent.css.

@-moz-document url-prefix(about:preferences) {
 #passwordExceptions { display:none !important; }
}

• https://www.userchrome.org/what-is-userchrome-css.html
• https://www.userchrome.org/how-create-userchrome-css.html

In Firefox 69 and later you need to set this pref to true on the about:config page to enable userChrome.css and userContent.css in the chrome folder.

• toolkit.legacyUserProfileCustomizations.stylesheets = true
• https://www.userchrome.org/firefox-changes-userchrome-css.html

Note that you can set this pref via autoconfig.cfg.

• lockpref("toolkit.legacyUserProfileCustomizations.stylesheets", true);