Firefox reveals saved passwords in plain text

I just found something disturbing in Firefox. All your saved passwords can be displayed with a few simple mouse clicks. Check this out if you use Firefox:

Go to Options
then Security
then click the "Saved Passwords" button
then click the "Show Passwords" button
then click Yes at the prompt "Are you sure you wish to show your password?"
And now saved passords are displayed in plain text.

This means that anyone can go to your computer while its unattended and view your passwords. And on my test computer passwords are saved and visible in this manner even though I have never asked Firefox to save passwords! This stikes me as a rather significant security flaw.

Other programs like Google Chrome and Microsoft Credential Manager also show saved passwords in plain text but before they do so the ask for your user password. This is a much better way to handle passwords.

A computer's security can be comprimised relatively easilly once a hacker has physical access to it but there's is no point in making so easy to access.

Last modified on Tuesday, 15 March 2016

Paul ( View Google Profile )

Paul Close is our Senior Solutions Architect. He has been involved with computers and technology since the 70’s. His mission is to remove the frustrations and complexity of technology so customers can enjoy all its benefits. He is passionate about all forms of Technology and enjoys keeping up to date with current trends and developments.