Join the AMA (Ask Me Anything) with the Firefox leadership team to celebrate Firefox 20th anniversary and discuss Firefox’s future on Mozilla Connect. Mark your calendar on Thursday, November 14, 18:00 - 20:00 UTC!

This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

How does thunderbird encrypt passwords?

  • 1 reply
  • 3 have this problem
  • 41 views
  • Last reply by Onno Ekker

more options

Chrome uses keyring to store passwords. Passwords are encrypted with system's user's account. So if anyone mounts your file system in another OS he won't be able to retrieve passwords cause he doesn't know your username's password.

I don't use master password. Are my passwords encrypted in such manner? Or I am vulnerable to such kind of attack?

Master password moreover protects password database from attackers even when I'm logged in. (so if I run app X it will be unable to get my passwords without knowing master password)

Chrome uses keyring to store passwords. Passwords are encrypted with system's user's account. So if anyone mounts your file system in another OS he won't be able to retrieve passwords cause he doesn't know your username's password. I don't use master password. Are my passwords encrypted in such manner? Or I am vulnerable to such kind of attack? Master password moreover protects password database from attackers even when I'm logged in. (so if I run app X it will be unable to get my passwords without knowing master password)

Chosen solution

When you don't have a master password set, the passwords are not encrypted in any way, so if someone else gets access to your file system, s/he can read the passwords you have stored for mail/news/chat.

If you do use a master password, the database is encrypted with it. If you don't know the password, you can't read the database, so you can't retrieve the stored passwords.

Read this answer in context 👍 2

All Replies (1)

more options

Chosen Solution

When you don't have a master password set, the passwords are not encrypted in any way, so if someone else gets access to your file system, s/he can read the passwords you have stored for mail/news/chat.

If you do use a master password, the database is encrypted with it. If you don't know the password, you can't read the database, so you can't retrieve the stored passwords.