auto sign in and password security
HELLO, Web page seems un-secure. Once open hamburg menu allows drop down and anyone can get my info. I ahd to also remove check mark for master password since annoying. Followed steps to remove and reset master PW but still keep asking every time logged on. References to my ESET that may be the cause. This was never a problem once registered few years back. So why cant I use Firefox to search without it having access to my private info. I should only need to access this when I need. So in the drop down hamburg menu if I go to Privacy and security that is where you should ask for PW or security question. So that you must have a PW to go into security would make sense to me. Other wise you are allowing anyone that may be using my computer and your web page to access my account, SO PLEASE DO NOT REPLY THAT the master password is the way to set this since it does not work properly. Even if I did use master this site is open to anyone. So it seems to be insecure and the web master should change the drop down to offer a PW when in the security and password tab, so that way it a second level pf protection. HOPE TO HEAR BACK and not just get a reply to see the Help section.Thanks Joseph Jan 26 ,2022
All Replies (5)
Hello Joseph. I think I understood your problem. But, for my clarity, please mention your issue a little more clearly with screenshots. This can help me to give you more clear and accurate reply that will actually solve your problem. Thank you!
HELLO Thanks for getting back and screen shots not helpful. The issue is simple you are permitting users to logon using so password doesn't have to be entered every time . That I can appreciate and use this way of logon. The problem is that in the drop down menu on right 3 bars, you provide many options like print etc maybe 10. What missing is that it allows you to go to both security and privacy plus passwords as 2 of the many options. This to me is a security issue, that being that if someone used or I left computer on for say 10min even a family member could get security and passwords etc. So the solution is even though I'm logged in with autofill you need to simply combine security ,privacy and passwords under one heading. Then you simply need to ask for the password in this category to ensure it is the actual user. Although I can see that one should be using own computer you have left a big opening for someone to get access to the account. So in other works force the user that is logged in that once you go to the security privacy password combo you have must enter the password again. The other drop downs are not a security issue these are. Your master password method also was an issue since it kept repeating after reset and does not work. A master password would still allow anyone to go to these security drop downs which is an issue. So in conclusion drop down hamburg menu when one has logged in with autofill password cannot be allowed to open security and privacy untils one enters the password. I had to delete my banking password since anyone say even in my hosehold could get access to that password. Hope this clarifies and I can hear back in a subsequent email. By the way in contacts have no way of sending a direct email on security issues. This ended up going to community hene it should be a direct email once the heading says its a security inquiry.
PS ONCE I PAST MY REPLY YOU NEED TO SEND AN ACKNOWLEDGEMENT. IT WOULD CLOSE SAYING SOMETHING LIKE THANK YOU AND WE WILL BET BACK ETC.
I think you are talking about the Password Manager automatically filling in the login data. Yes?
This is an option that you can turn off if you want. BTW, only someone with access to your computers user account can access your Firefox profile.
Type about:preferences#security<enter> in the address box.
Look under Logins,
Note: For Firefox v56+ its; about:preferences#privacy Look under Forms & Passwords Or type about:logins<enter> in the address box (For settings, click the 3 dots upper right) +++++++++++++++++++++++++++++++ Turn on or off Remember Logins. To check the passwords you have listed, press Saved Logins.
Press the Exceptions button and see what's inside.
https://support.mozilla.org/en-US/kb/password-manager-remember-delete-edit-logins
jpfalcone said
This to me is a security issue, that being that if someone used or I left computer on for say 10min even a family member could get security and passwords etc. ... I had to delete my banking password since anyone say even in my household could get access to that password.
You probably know you can lock your Windows screen so no one can use the computer without entering your Windows password. The fastest way to do that is to hold down the "Windows" key and tap the L key. I use that reflexively after working in an office with a lot of pranksters many years ago.
Your master password method also was an issue since it kept repeating after reset and does not work.
Do you mean Firefox keeps asking for your Master Password? Firefox usually will ask any time you open a page with a form that it wants to autofill. It also will ask at least once if you have set up Firefox Sync, since your Sync login also is secured by the Master Password. I usually dismiss the box by tapping the Esc key until I'm ready to actually log in to a site.
A master password would still allow anyone to go to these security drop downs which is an issue.
Unfortunately, once you unlock your saved logins with the Master Password, there is no easy way to re-lock them. There is no way to unlock only for one use. The fastest way I have found to re-lock logins is:
- Click menu > Passwords to open the about:logins page
- Click the "eye" icon to view any password
- Cancel the confirmation dialog