Mozilla VPN is currently experiencing an outage. Our team is actively working to resolve the issue. Please check the status page for real-time updates. Thank you for your patience.

This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Cuireadh an snáithe seo sa chartlann. Cuir ceist nua má tá cabhair uait.

Master password is not requested on Android when accessing password list.

  • 2 fhreagra
  • 1 leis an bhfadhb seo
  • 1 view
  • Freagra is déanaí ó kb

more options

I have set a master password on Android.

When I start Firefox, I will be queried for the master password, but afterwards never again until the app gets closed. In this way, the master password offers no protection – anyone I lend my phone to could freely browse my passwords in practice.

This contrasts with Firefox for Windows, Firefox for iOS, and all versions of Chrome, where a password is required either before viewing the password list at all (best) or at least before revealing the password (acceptable).

With Android, the masterpassword is requested on startup, when it isn't really needed yet, but not, when it would actually provide protection.

Is there any way to get a behavior more in sync with other devices?

I have set a master password on Android. When I start Firefox, I will be queried for the master password, but afterwards never again until the app gets closed. In this way, the master password offers no protection – anyone I lend my phone to could freely browse my passwords in practice. This contrasts with Firefox for Windows, Firefox for iOS, and all versions of Chrome, where a password is required either before viewing the password list at all (best) or at least before revealing the password (acceptable). With Android, the masterpassword is requested on startup, when it isn't really needed yet, but not, when it would actually provide protection. Is there any way to get a behavior more in sync with other devices?

Réiteach roghnaithe

Kb Master password is for protection and whenever you see any password protection method like you are putting password in android phone and then you are using phone without putting password and password starts again when you again use your phone. Firefox asks for master password to authenticate you and when you authenticates and then use browser for surfing internet. No type of protection asks for password again and again if you are authenticated. If you have not updated your browser and update it to the latest version for more features and for more protection.

Read this answer in context 👍 0

All Replies (2)

more options

Réiteach Roghnaithe

Kb Master password is for protection and whenever you see any password protection method like you are putting password in android phone and then you are using phone without putting password and password starts again when you again use your phone. Firefox asks for master password to authenticate you and when you authenticates and then use browser for surfing internet. No type of protection asks for password again and again if you are authenticated. If you have not updated your browser and update it to the latest version for more features and for more protection.

Athraithe ag aditya81028 ar

more options

aditya81028 said

No type of protection asks for password again and again if you are authenticated. If you have not updated your browser and update it to the latest version for more features and for more protection.

On desktop Firefox, I can login to websites without reentering the master password, but I cannot view the password in the password list without authenticating again.

In some environments (Chrome? Can't check right now) I have seen prompts for the password even before listing the websites for which passwords are saved, which is even better.

Athraithe ag kb ar