This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

You hold my sign on details for some sites: Convince me this info is secure?

  • 3 replies
  • 1 has this problem
  • 5 views
  • Last reply by TheBucket

more options

The latest news on the Yahoo hack has made me nervous. I use Firefox to remember my sign on details for my Email account. How secure is Firefox?

The latest news on the Yahoo hack has made me nervous. I use Firefox to remember my sign on details for my Email account. How secure is Firefox?

Chosen solution

Personally I would not rely on Firefox's Master Password for saving credentials I use for banking. The info is encrypted some of the time on the local computer, but If I Recall Correctly not to the highest standards maybe taking minutes to crack in a brute force attack.

The Sync data is encrypted end to end to high standards. I am not too sure I would trust Sync too much because

  • I have seen mention of reliability issues
  • I think it is not specifically designed to backup information. The backup is the data on your computer. So that relies on the Master Password at best.

For more info on Sync

Read this answer in context 👍 1

All Replies (3)

more options

Login details such as that are stored within your Firefox installation, so that your data is as secure as your computer is. You can make that data even more secure by using a Master Password in Firefox, along with a password for your Windows Logon User Account. https://support.mozilla.org/en-US/kb/use-master-password-protect-stored-logins

The Yahoo hack which was in the new back in September and then again this week is different than storing your username & password for your email account inside of Firefox. Yahoo servers were hacked to get far more personal data than merely usernames & passwords for email accounts.

Unless you are using Mozilla or Firefox optional features which you haven't mentioned ...

more options

Chosen Solution

Personally I would not rely on Firefox's Master Password for saving credentials I use for banking. The info is encrypted some of the time on the local computer, but If I Recall Correctly not to the highest standards maybe taking minutes to crack in a brute force attack.

The Sync data is encrypted end to end to high standards. I am not too sure I would trust Sync too much because

  • I have seen mention of reliability issues
  • I think it is not specifically designed to backup information. The backup is the data on your computer. So that relies on the Master Password at best.

For more info on Sync

Modified by John99

more options

Thanks to both of you for replying to my question. I will change my email password (which is about due now anyway) and revert to entering it manually.