Join the AMA (Ask Me Anything) with the Firefox leadership team to celebrate Firefox 20th anniversary and discuss Firefox’s future on Mozilla Connect. Mark your calendar on Thursday, November 14, 18:00 - 20:00 UTC!

为提升您的使用体验,本站正在维护,部分功能暂时无法使用。如果本站文章无法解决您的问题,您想要向社区提问的话,请到 Twitter 上的 @FirefoxSupport 或 Reddit 上的 /r/firefox 提问,我们的支持社区将会很快回复您的疑问。

搜索 | 用户支持

防范以用户支持为名的诈骗。我们绝对不会要求您拨打电话或发送短信,及提供任何个人信息。请使用“举报滥用”选项报告涉及违规的行为。

详细了解

Is my sync data encrypted if the other device is iOS

  • 3 个回答
  • 1 人有此问题
  • 8 次查看
  • 最后回复者为 cor-el

more options

Hi,

I recently installed firefox on my desktop, created a Mozilla account and a passphrase for my profile data.

When I chose the iPhone as the second device to sync and the operation completed, I went to my iPhone, launched firefox and was able to go to the password section and select copy/reveal without it asking for my passphrase. So my valuable data is just there for anyone to view.

Can you please explain this behavior to me?

Thanks

Hi, I recently installed firefox on my desktop, created a Mozilla account and a passphrase for my profile data. When I chose the iPhone as the second device to sync and the operation completed, I went to my iPhone, launched firefox and was able to go to the password section and select copy/reveal without it asking for my passphrase. So my valuable data is just there for anyone to view. Can you please explain this behavior to me? Thanks

被采纳的解决方案

The data sent through Firefox Sync is encrypted using your password. This is why, if you were to reset your Firefox Account password, your bookmarks, passwords and any other data on Firefox Sync would get removed from the Firefox Sync servers, since it can't be decrypted with the new account password.

The behaviour that you described does indeed sound normal.

When you first setup Firefox Sync, you will need to log in and provide the password as well as complete an additional email verification process (likely). However, after you get signed in, your device will remember your Firefox Sync information so that you don't have to sign in each time.

That does mean that if someone were to obtain your device, they could look at whatever is saved in Firefox. The same would be the case if you didn't use Firefox Sync.

You can log a device out of Firefox Sync from anywhere using the Firefox Accounts settings page, that won't remove any content that's already been saved to the device. It will just prevent new or updated content from being sent to that device from Firefox Sync.

What you can do to secure your passwords more is you could enable a Master Password. That would make it so that you need to enter that Master Password before you will be able to see the logins and passwords saved in Firefox.

Side Note: Using a Master Password and Firefox Sync does not currently work on Firefox for Android.

Hope this helps.

定位到答案原位置 👍 0

所有回复 (3)

more options

选择的解决方案

The data sent through Firefox Sync is encrypted using your password. This is why, if you were to reset your Firefox Account password, your bookmarks, passwords and any other data on Firefox Sync would get removed from the Firefox Sync servers, since it can't be decrypted with the new account password.

The behaviour that you described does indeed sound normal.

When you first setup Firefox Sync, you will need to log in and provide the password as well as complete an additional email verification process (likely). However, after you get signed in, your device will remember your Firefox Sync information so that you don't have to sign in each time.

That does mean that if someone were to obtain your device, they could look at whatever is saved in Firefox. The same would be the case if you didn't use Firefox Sync.

You can log a device out of Firefox Sync from anywhere using the Firefox Accounts settings page, that won't remove any content that's already been saved to the device. It will just prevent new or updated content from being sent to that device from Firefox Sync.

What you can do to secure your passwords more is you could enable a Master Password. That would make it so that you need to enter that Master Password before you will be able to see the logins and passwords saved in Firefox.

Side Note: Using a Master Password and Firefox Sync does not currently work on Firefox for Android.

Hope this helps.

more options

I have enabled a master password and it prompts me for it every time I start Firefox, just like I want. However, on my iPhone I was able to look at my passwords and logins without entering the master password. This is the part I don't fully understand, I was under the impression the master password would also be required on my iPhone when looking at passwords saved in Firefox.

more options

Note that there is a difference between the master password that encrypts the logins on the device that uses this MP and the sync key that is derived from the password of the Sync account and this sync key is used locally to encrypt your personal data including usernames and passwords locally before uploading this data to the Sync server.
On the Sync server the logins aren't encrypted with the MP (only with the sync key) as that needs to be done on each connected individual device and in addition there is also a special seed used locally as a basic encryption key.