Join the AMA (Ask Me Anything) with the Firefox leadership team to celebrate Firefox 20th anniversary and discuss Firefox’s future on Mozilla Connect. Mark your calendar on Thursday, November 14, 18:00 - 20:00 UTC!

This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Mozilla Support में खोजें

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

master password bug in mozilla thunderbird

  • 3 प्रत्युत्तर
  • 1 यह समस्या है
  • 17 views
  • के द्वारा अंतिम प्रतियुतर christ1

more options

To whom it may concern,

Hi, my name is ashim roy. i think i may have found a serious security flaw in thunderbird master password for locking and unlocking the app.

i can open the app, access all the emails, change settings. passwords, even see the passwords for all my emails without trying a single masterpassword. when you click the thunderbird icon to open the app the masterpassword prompt pops up asking for the password, all you have to do is click cancel and it opens up the app. you can click on any email again it will ask for the master password just click cancel and you will have access to all the emails. sometime it asks you two or three times for the password when you click something but it doesn't matter just click cancel and continue with your task.

It beast the whole purpose of the master password when anybody can just have access to your emails, passwords, your contact lists, everything. the thunderbird version 78.13.0(64-bit), OS Name: Ubuntu 21.04, OS Type:(64-bit), GNOME Version: 3.38.5, Windowing System: Wayland

To whom it may concern, Hi, my name is ashim roy. i think i may have found a serious security flaw in thunderbird master password for locking and unlocking the app. i can open the app, access all the emails, change settings. passwords, even see the passwords for all my emails without trying a single masterpassword. when you click the thunderbird icon to open the app the masterpassword prompt pops up asking for the password, all you have to do is click cancel and it opens up the app. you can click on any email again it will ask for the master password just click cancel and you will have access to all the emails. sometime it asks you two or three times for the password when you click something but it doesn't matter just click cancel and continue with your task. It beast the whole purpose of the master password when anybody can just have access to your emails, passwords, your contact lists, everything. the thunderbird version 78.13.0(64-bit), OS Name: Ubuntu 21.04, OS Type:(64-bit), GNOME Version: 3.38.5, Windowing System: Wayland

Wayne Mery द्वारा सम्पादित

All Replies (3)

more options

Master password is not intended to protect the emails on your computer - it's to protect passwords.

To protect the contents of your computer, including mail, that's what your user account on the computer is for.

more options

I think you misunderstood me. I wasn’t talking about user account password for my pc. I was specifically talking about master password for Mozilla thunderbird that one can create to lock the mozilla thunderbird app so nobody else can open it when somebody else using my pc.