

I only managed to find 10 which were really good - they integrate seamlessly with Firefox, provide high security, are easy-to-use, and come with additional features.įirefox does have a built-in password manager (Lockwise), but it’s pretty limited - it generates weak passwords (without any special characters), doesn’t fill out web forms accurately, and lacks essential features like password sharing. I tested every single password manager on the market to find the best ones for Firefox.
Firefox profile manager password full#
If your full disk is not encrypted, and you don't securely erase/destroy it when you discard your device, your saved passwords can be obtained from there as well if you do not use a master password. Without a master password your saved passwords can be read at any time by programs running on your device. With a master password, Firefox must be running with your master password entered, or your master password must be stolen with a key logger. But local access could be any program running as your user account, or any Firefox add-on, as discussed above. Considering the encryption discussed above, Mozilla never has your password data in usable form.

You encrypt locally, so anyone breaking into the server will need to break your master password to read any login credentials. As far as I can tell, the security model is about the same, if you use a master password.

They all get saved to the same place and they all get synchronized if you turn the option on.

Synchronized passwords are no different from other saved passwords. It would not be hard to also scrape text from password fields. Regardless, even without this ability, addons often use access to website content to do same legitimate task. I'm not really sure why this is part of your question. You yourself are using an add-on that can save, read, and edit passwords.
