Funkcionalnosć tutoho sydła so přez wothladowanske dźěła wobmjezuje, kotrež maja waše dožiwjenje polěpšić. Jeli nastawk waš problem njerozrisuje a chceće prašenje stajić, wobroćće so na naše zhromodźenstwo pomocy, kotrež na to čaka, wam na @FirefoxSupport na Twitter a /r/firefox na Reddit pomhać.

Avatar for Username

Pomoc přepytać

Hladajće so wobšudstwa pomocy. Njenamołwimy was ženje, telefonowe čisło zawołać, SMS pósłać abo wosobinske informacije přeradźić. Prošu zdźělće podhladnu aktiwitu z pomocu nastajenja „Znjewužiwanje zdźělić“.

Dalše informacije

Tuta nitka je so archiwowała. Prošu stajće nowe prašenje, jeli pomoc trjebaće.

Master password not needed for syncing and showing passwords in plain text. How can this be secure?

  • 1 wotmołwa
  • 1 ma tutón problem
  • 3 napohlady
  • Poslednja wotmołwa wot cor-el

maltedk
maltedk
more options

I've just made a clean windows 10 install on my main computer, and installed linux mint 18 on a virtualbox - all machines running firefox. I signed in to sync and ALL my passwords synced WITHOUT asking for the Master Password. This makes me eerie. I was even able to show passwords in plain text. Are the passwords synced to the server unencrypted, and how am I able to see the synced passwords without the Master Password?

I am not sure, but I might have set up the Master Passwords AFTER saving password (thus being unencrypted).

Best, Malte

I've just made a clean windows 10 install on my main computer, and installed linux mint 18 on a virtualbox - all machines running firefox. I signed in to sync and ALL my passwords synced WITHOUT asking for the Master Password. This makes me eerie. I was even able to show passwords in plain text. Are the passwords synced to the server unencrypted, and how am I able to see the synced passwords without the Master Password? I am not sure, but I might have set up the Master Passwords AFTER saving password (thus being unencrypted). Best, Malte

Wšě wotmołwy (1)

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

Are you currently using a master password on some or all connected devices?

All your personal data is encrypted by using a Sync key that is derived from the password of the sync account, so all data that leaves your computer is always encrypted and only this password can decrypt this data.

Once you set a MP then already stored passwords will be encrypted with this master password. One you have entered the MP during a Firefox session like happens when you connect to Sync when Firefox is started logs you in to the Software Security Device and unlocks the password. That Firefox asks for the master password when you want to view the passwords in the Password Manager is not necessary, but is only an extra step added by the Firefox developers.