Yonke imikhiqizo Community Forum

Thunderbird will not start because the first visible startup action is the popup window: "Please enter your Primary Password". Unable to create a password for the initial,first time re-start of Window if on old machine, option was to avoid this. How to fix? ...so I can set and set and use it.

Something changed a few weeks ago (about November 30) and since then Thunderbird will not allow me access to any new emails, nor to be able to send new emails.

Instead, I get a large pop-up window which basically says "Enter credentials: Mozilla Thunderbird Email wants to access your Google Account <my email typed here> This will allow Mozilla Thunderbird Email to: Read, compose, send, and permanently delete all your email from Gmail".

I don't want anyone to permamently delete any of my emails, nor do I want anyone sending emails from my email account (etc, etc).

SO I click deny, and the pop-up goes away - that is until I try to use Thunderbird and it pops up again.

I've been using Thunderbird for many years and never had this problem before. Do the Thunderbird or Mozilla techs know anything about this and how do I fix it, or is it a new policy (which means I will no longer be using Thunderbird)?

I have searched here some time in December but nothing suggested by other users worked for me.

Firefox had been a safe haven for anti-AI, and used to be my go-to search engine. If this AI bullshit continues, no one will respect or use the browser. Stop implementing AI garbage that steals data

When I attempt to add a Gmail account, I get this error - "Unable to login at server. Probably wrong configuration, username, or password"

Below are the steps with screenshots: - checked for no cookies to prevent Google from asking for an actual login - no stored google passwords - didn't put in my password on setup - TB finds the available configuration - prompted to login at google - add google password - allow access - error message

I have restarted Thunderbird. I have checked for updates (even though I have it on auto-update).

Are there settings on my Google or Gmail account that could prevent this from working?

I have set a Primary Password in Thunderbird, but when it requests it, pressing cancel for some times bypass the request and I can login without any problem

I'm on Linux Mint 21.3 Cinnamon

I sent a private email to one person, when I checked my email later on, "friend" asked a question about the previous person's sent (from me) email and its content! I checked my sent folder, and tried to figure what happened. I did not find her in my sent folder! How could this happen? I felt my privacy was compromised which it was! Please tell me what to do to protect myself from this "friend" with things that are none of her business, Sincerely, Chris Williams

Is there any way to open just one particular message that is in the Thunderbird inbox as plain text, without changing the setting for all messages?

I've read solutions that say to: Go to the "View" menu at the top of the Thunderbird window; Choose "Message Body As" > "Plain Text".

If I follow those instructions, then all subsequent messages that I open are also displayed as plain text, until I change that option back. That's not the solution I'm hoping for.

I've also read that I can right-click a message in the inbox ... Select "View" from the context menu; Choose "Message Body As" > "Plain Text".

but I have no "View" option in the context menu.

When I get a message from a sender which I suspect might be a scam, it would be very helpful from a security standpoint to be able to easily open just that one suspicious message as plain text.

Is there any way to do this? I've also looked for an add-on which might enable me to do this, but couldn't find one.

Any suggestions appreciated, thanks!

I would like to know how the Firefox CVEs are affected on its version which are mentioned in NVD.

Let take mfsa2025-59, for example CVE-2025-8040, as per the NVD its says Firefox ESR < 140.1 is affected so does that mean it affect all the version which are lower than 140.1 which included the ESR 128 and ESR 115 versions or just the ESR 140 version series? then it raise on more question check this cve-2025-8029 in NVD it has specifically mentioned it only affect "Firefox ESR < 128.13, Firefox ESR < 140.1" and not the ESR 115 versions. Could anyone confirm it does not affect the ESR 115 versions or it affect all the versions? Now check this one cve-2025-8027, NVD clearly mentioned "Firefox ESR < 115.26, Firefox ESR < 128.13, Firefox ESR < 140.1" are affected so what I understand is that if the Firefox ESR 115 is vulnerable to any CVE it would be mentioned in the NVD specifically.

My point is that if any Firefox CVEs are listed in NVD and it specify only one version like “Firefox ESR < 140.1” what does that mean? Does it affect all the versions which include ESR 128 and ESR 115 or just the ESR 140 series version only affected? If any CVEs are affected on the ESR 115 and ESR 128 does Mozilla specifically mentioned those versions are affected right? Just like its mentioned in the cve-2025-8027

Any help would be appreciated to clarify this.

Hello. I know how to define a server certificate exception to avoid browser warnings in case of certificate issue with a website (see attachment). However, I'd like to apply that exception for all users with access to my machine using a GPO (for user or local machine). This is also a requirement in my work where many users run Firefox from a server and the face browser warnings all the time (related to self-signed certificates) so it would be great to apply an exception for all users through a GPO specifying the self-signed certificate warning we want Firefox to ignore. Thanks.

Hi our Kaspersky detected objects but unfortunately our antivirus can't delete all the detected. I try to uninstall the thunderbird but still unable to delete the virus's message.

Hope get the assist for your team.

thank you

An infected website warning by AVG comes up every time I open Mozilla. It doesn't occur with other browsers. How can I get rid of it. It seems like it's the same URL.

As title, MS defender keeps detecting trojans everytime firefox is launched and while I'm pretty sure it's probably just a false positive its just getting rather frustrating and now more so, worrying that it's constantly happening.

I am logged on to my Credit Union and attempt to download my statements. When using Firefox I get the message: {"Errors":["Authorization has been denied for this request."]}

When I contacted my CU, they said to add an URL to the Manage Exceptions. This worked, but I want to know why Firefox needs this but Chrome doesn't.

I have remote content blocked as a default. If I choose to view remote content **for an individual message**, there seems to be no way to reblock it, because the yellow bar with "options" disappears after you allow the remote content for that message. (Whoopsy! Changed my mind! Let's say I don't want the remote content to transmit that I opened the message a second time when I do so.)

Mail Content > Exceptions does not help in this case, since I allowed the remote content from a specific message, rather than allowing a wider permission, such as allowing remote content from a particular email address or website. Copying the message link into Mail Content > Exceptions (as suggested in an old post) doesn't work, either.

So it seems I am now stuck having remote content active each time I need to open that message?

Windows 11 Thunderbird = current at the time of this writing. (150.0.2 64bit)

Hi Team,

Greetings!

I need your assistance regarding password protection for the Thunderbird email client.

I have configured an IMAP account in Thunderbird and enabled the **Primary Password** feature. However, if I cancel or skip the password prompt during startup, Thunderbird still opens successfully, and all previously synchronized email messages in the Inbox remain accessible. The user is also able to view the mailbox and access email content.

My requirement is that "Thunderbird should not open, display any email messages or allow Send/Receive operations unless the correct password is entered".

Could you please advise if this functionality is supported natively or suggest the recommended approach to achieve this?

Looking forward to your guidance.

Regards, Ps Cheema

Thunderbird open when I skip password prompt for more than 4 times. I password protect thunderbird & when I try to open it's prompted for password BUT when I skip it by click on X for more than 4 times Thunderbird opened & I'm able to mail & read mail. It's a security bug so please fix this.

I genuinely don’t know where else to post this so it gets seen. I have been a devout user of Firefox for years. I love this browser. I love its dedication to privacy and functionality. I love how it has kept true to its concept and customers in the face of tech crazes like NFTs and AI integrations. I am such a hardcore proseletyzer of Firefox that I started paying for Mozilla VPN to support Firefox!!

So when I see that the new CEO, Anthony Enzor-DeMeo, is “doubling down” on AI integrations for Firefox, I AM LIVID. AI is NOT private. AI is NOT secure. And AI is TERRIBLE FOR THE ENVIRONMENT.

AI causes slower speed and longer load times. I have seen this in all my job’s internet workings (they insist on using browsers with AI integrations) and have felt a quiet relief that I get to come home to my good, simple browser.

AI is not private. It tracks and stores data in order to give suggestions “better for you”. And with the right prompts, anyone can pull that data.

Y’all really all read that one story of AI deleting the company’s ENTIRE DATABASE AND COMPUTER PROGRAMMING because it “panicked” and decided “ah yes, this is the techware we want to hand over all our customers to”??

I am so deeply disappointed by Mozilla’s betrayal of its customer base.

If Mozilla moves forward with AI integrations, I will pull out of using Firefox and I will stop giving Mozilla my money. Mozilla should not have hired a CEO who goes so adamantly against everything Mozilla as a company stands for.

And to the CEO Anthony: I hope you step in something wet in only your socks, every single day, until you either come to your senses or someone better replaces you as CEO of Mozilla.

As per the title. I have allowed external content for one message (it is disabled by default). Finding the option to do that was easy, because there is a specific message with a drop-down menu to configure access to external content for that particular message.

However, now that I have allowed external content, I do not wish to keep it allowed (no need for external parties to know when and where I open and re-open and re-re-open this e-mail). The drop-down menu to manage the privacy options for this particular message has disappeared. That is inconvenient, to say the least, because I can't see any other way to get to those options. What am I missing?

Hi, somehow thunderbird forced me to use OAuth for caldav and carddav. (v140 on linux) Unless I've probably missed something this approach doesn't seem to have considered that people might use more than one device. In the past I had an application password per device with my mail provider. That password covered imap, smtp, caldav and carddav. The application password I could set with a specific name at my mail provider. If the device was lost, compromised or whatever I just deleted that one application password at my mail provider, problem solved.

Now a regular thunderbird setup has the application password for mail and 2 OAuth records per device under "Connected Apps" at my mail provider. But it is not possible to see anymore to which device the OAuth record belong, as there is nothing device specific coming along with these OAuth records, just an IP.

With that perspective OAuth weakened my security options, as I can only guess which OAuth record I have to delete in an emergency case. Did anyone who implemented that with Thunderbird considered that people may have more than 1 device? Maybe even more than 5 devices?

That OAuth approach looks unmanagable to me. Is there a way to switch OAuth off in thunderbird, until it becomes more useable in >1 device setups?

Cheers Tjareson