This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Security flaw: passwords on Firefox app for Android can be seen without entering phone pin/password.

  • Amul benn tontu
  • 2 am na jafe-jafe bii
talleyegrace
talleyegrace
more options

Firefox for Android app, build 132.0.2.

When opening the password tab, the prompt to enter your devices pin or password appears as it should. However, spamming the "cancel" button on the prompt or the Android's back button (about 4 or 5 times) allows you to go to the password manager and view all usernames and passwords without reentering the device's pin/password.

To recreate: open the password tab, enter pin prompt opens, pressing cancel reopens the pin prompt, pressing cancel 4 or 5 times opens the password manager without verification.

Firefox for Android app, build 132.0.2. When opening the password tab, the prompt to enter your devices pin or password appears as it should. However, spamming the "cancel" button on the prompt or the Android's back button (about 4 or 5 times) allows you to go to the password manager and view all usernames and passwords without reentering the device's pin/password. To recreate: open the password tab, enter pin prompt opens, pressing cancel reopens the pin prompt, pressing cancel 4 or 5 times opens the password manager without verification.

You must log in to your account to reply to posts. Please start a new question, if you do not have an account yet.