When I set master password I can still copy the password of a site in my clipboard by right clicked on the list entry and selecting copy password
When master password is set and you check the list of sites you have stored your credentials, you can see only the site url and the registered username. In order to see the paasword you have to press the show passwords button and give the master password. I have noticed that if you right click any element of this list and select the only option that you get, copy password, the password is copied in your clipboard and you can paste and see it. Fortunately if i have not unlocked the browser with my master password it does not show any entry, but still, I like the idea of requesting master password once again to see the list of passwords. Best airmil
All Replies (3)
Protecting Stored Passwords using a Master Password
- https://support.mozilla.com/en-US/kb/Protecting%20stored%20passwords%20using%20a%20master%20password
- http://kb.mozillazine.org/Master_password
Check and tell if its working.
Sorry but I think you did not understand my testing scenario. I have already set up master password, I have been using it since firefox 2.0 or even earlier. The obvious path to check your saved passwords, if you have already set up master password, is to open Preferences ->security -> saved passwords. Then click on "show passwords" button and give the master password in order to see them. "The bug" is that you don;t need to provide the master password again if you, before pressing the show passwords button, right click on any entry of the list and select copy password. Again I am mentioning that this will have only if after opening your browser, at some point you have provided at least once the master password to access for example a site.
Yes that is how it works.
You already have entered the master password to see the names and that means that you also have access to the passwords. The fact that Firefox ask once again to enter the master password to see the stored passwords is not actually required, but is only done to make it more difficult. Firefox 4+ adds the feature to copy the password to the clipboard is case you cant enter it anymore on a website because they changed the code or the URL. Firefox 4+ will automatically log out of the software security device after 30 minutes (security.password_lifetime) and requires to re-enter the master password. You can log out manually if you click Cancel after opening Show Passwords.
Modified by cor-el