This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Friends password synced with my account

  • 7 replies
  • 0 have this problem
  • Last reply by cor-el

more options

Hello,

I was at a friend last night and logged into my monzilla account on his firefox browser. To my shock all his passwords, over 300 of them, got added to my password. I just want to point out here that his passwords were stored locally without an account. As soon as I logged in it started syncing on my account. This is a HUGE SECURITY BREACH and should be addressed immediately. there should at least be a prompt or 2 making sure that I want to add locally stored password to my account or not.

If I had not noticed it at that time I would probably have gotten away with all of his passwords without me or him knowing. I had to manually delete the ~300 entries. makes you think how many times this already happened in the past for others.

Best regards, Remco

Hello, I was at a friend last night and logged into my monzilla account on his firefox browser. To my shock all his passwords, over 300 of them, got added to my password. I just want to point out here that his passwords were stored locally without an account. As soon as I logged in it started syncing on my account. This is a HUGE SECURITY BREACH and should be addressed immediately. there should at least be a prompt or 2 making sure that I want to add locally stored password to my account or not. If I had not noticed it at that time I would probably have gotten away with all of his passwords without me or him knowing. I had to manually delete the ~300 entries. makes you think how many times this already happened in the past for others. Best regards, Remco

Chosen solution

Yes I did this immediately, my problem is solved now

Read this answer in context 👍 1

All Replies (7)

more options

Hi

Firefox Sync is designed to do just that - sync passwords, bookmarks and other data between copies of Firefox.

You may also want to check to see if your passwords and bookmarks are now on your friends device.

Helpful?

more options

You would think there would be at least a prompt to ask me if I want to sync local stored passwords (not linked to any account) that are not even mine right? I did not even click on sync. it's just so weird to me that that can happen. so If you would login to my browser for example you'd have my passwords and I have yours. where is the logic in that?

This might refrain me from using the browser as a whole which would be a shame because I like it allot.

Helpful?

more options

As said it's sync regardless of Firefox computers running the browser. Now you have to change your login and hopefully your friend doesn't get excited to see what's in your closet. Let this be a learning lesson never login in on a computer not yours or has separate password protected accounts.

Helpful?

more options

My apologies, i taught that it synced to the cloud and then back to my devices. This was not explicitly told when I activated it. It only syncs from a device to another without the cloud.

My bad for the misunderstanding.

Helpful?

more options

Did you disconnect Sync on your friends computer as in that case Firefox might have asked whether to remove synced data ?

Helpful?

more options

Chosen Solution

Yes I did this immediately, my problem is solved now

Helpful?

more options

Note that Firefox doesn't sync directly to other devices, it uploads data from all connected devices to the Sync server and merges that to the other connected devices.

Helpful?

Ask a question

You must log in to your account to reply to posts. Please start a new question, if you do not have an account yet.