Logging out of Sync with Master Password active
Hi! I just wanted to log out from Sync on another machine. I have a master password set. When i want to logout, it asks for the Masterpw. Anyone else thinking, this is bad, from a security point of view? Let's just say, you found a shady site or installed a shady plugin, or someone is shouldersurfing you maybe under pressure. The "Logout and delete everything" would not be possible without giving out your master PW seems a bit awkward.
Hi!
I just wanted to log out from Sync on another machine.
I have a master password set. When i want to logout, it asks for the Masterpw.
Anyone else thinking, this is bad, from a security point of view?
Let's just say, you found a shady site or installed a shady plugin, or someone is shouldersurfing you maybe under pressure.
The "Logout and delete everything" would not be possible without giving out your master PW seems a bit awkward.
所有回覆 (1)
Firefox stores the credentials (kA,kB) to login to the Firefox Account when Firefox starts in the Profile Manager (logins.json) and you need the enter the PP to unlock the passwords to make it possible to remove this login password (chrome://FirefoxAccounts).