為了改善您的使用體驗,本網站正在進行維護,部分功能暫時無法使用。若本站的文件無法解決您的問題,想要向社群發問的話,請到 Twitter 上的 @FirefoxSupport 或 Reddit 上的 /r/firefox 發問,我們的社群成員將很快會回覆您的疑問。

搜尋 Mozilla 技術支援網站

防止技術支援詐騙。我們絕對不會要求您撥打電話或發送簡訊,或是提供個人資訊。請用「回報濫用」功能回報可疑的行為。

了解更多

how much can I trust firefox password manager

  • 3 回覆
  • 2 有這個問題
  • 2 次檢視
  • 最近回覆由 user1257813

more options

How safe is firefox password manager? Can you give us some information on this subject? Mainly focus on: how hard is it to crack the passwords on firefox password manager for a hacker? How are our data stored, i.e. which type of encryption, both in my computer and your Sync server?

How safe is firefox password manager? Can you give us some information on this subject? Mainly focus on: how hard is it to crack the passwords on firefox password manager for a hacker? How are our data stored, i.e. which type of encryption, both in my computer and your Sync server?

被選擇的解決方法

The names and passwords stored in logins.json are encrypted with an encryption key that is stored in the key3.db file. The master password adds an additional level to this encryption. If you do not use a master password then having access to key3.db and logins.json is sufficient to have access to the encrypted names and passwords by placing the two files in a Firefox profile folder. Make sure to use a password that is sufficiently strong, e.g. at least 10 or 12 characters and a mixture of uppercase, lowercase, numbers and symbols that can't be found via a dictionary look up by combining words and you should be safe.

從原來的回覆中察看解決方案 👍 1

所有回覆 (3)

more options
more options

選擇的解決方法

The names and passwords stored in logins.json are encrypted with an encryption key that is stored in the key3.db file. The master password adds an additional level to this encryption. If you do not use a master password then having access to key3.db and logins.json is sufficient to have access to the encrypted names and passwords by placing the two files in a Firefox profile folder. Make sure to use a password that is sufficiently strong, e.g. at least 10 or 12 characters and a mixture of uppercase, lowercase, numbers and symbols that can't be found via a dictionary look up by combining words and you should be safe.

more options

Thanks for this valuable information. @cor-el