This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Friends password synced with my account

remcohaak
remcohaak
more options

Hello,

I was at a friend last night and logged into my monzilla account on his firefox browser. To my shock all his passwords, over 300 of them, got added to my password. I just want to point out here that his passwords were stored locally without an account. As soon as I logged in it started syncing on my account. This is a HUGE SECURITY BREACH and should be addressed immediately. there should at least be a prompt or 2 making sure that I want to add locally stored password to my account or not.

If I had not noticed it at that time I would probably have gotten away with all of his passwords without me or him knowing. I had to manually delete the ~300 entries. makes you think how many times this already happened in the past for others.

Best regards, Remco

Hello, I was at a friend last night and logged into my monzilla account on his firefox browser. To my shock all his passwords, over 300 of them, got added to my password. I just want to point out here that his passwords were stored locally without an account. As soon as I logged in it started syncing on my account. This is a HUGE SECURITY BREACH and should be addressed immediately. there should at least be a prompt or 2 making sure that I want to add locally stored password to my account or not. If I had not noticed it at that time I would probably have gotten away with all of his passwords without me or him knowing. I had to manually delete the ~300 entries. makes you think how many times this already happened in the past for others. Best regards, Remco

All Replies (3)

Paul
Paul
  • Top 25 Contributor
  • Moderator
more options

Hi

Firefox Sync is designed to do just that - sync passwords, bookmarks and other data between copies of Firefox.

You may also want to check to see if your passwords and bookmarks are now on your friends device.

Helpful?

remcohaak
remcohaak Jụọ onye nwe ya ajụjụ
more options

You would think there would be at least a prompt to ask me if I want to sync local stored passwords (not linked to any account) that are not even mine right? I did not even click on sync. it's just so weird to me that that can happen. so If you would login to my browser for example you'd have my passwords and I have yours. where is the logic in that?

This might refrain me from using the browser as a whole which would be a shame because I like it allot.

Helpful?

markwarner22
markwarner22
more options

As said it's sync regardless of Firefox computers running the browser. Now you have to change your login and hopefully your friend doesn't get excited to see what's in your closet. Let this be a learning lesson never login in on a computer not yours or has separate password protected accounts.

Helpful?

Jụọ ajụjụ

You must log in to your account to reply to posts. Please start a new question, if you do not have an account yet.