Results 1 to 10 of 10

Thread: Firefox Passwords - Safe?

  1. #1
    Join Date
    Oct 2008
    Location
    UK
    Beans
    1,147
    Distro
    Ubuntu 13.04 Raring Ringtail

    Firefox Passwords - Safe?

    It is obviously convenient to have Firefox save and manage ones passwords for numerous web sites - but it is easy to access these passwords? They are easily obtained through Edit/Preferences/Security/Saved Passwords/Show Passwords/Yes - there is no password protection to 'see' these passwords. So how safe are these valuable passwords when surfing on the net?

  2. #2
    Join Date
    Nov 2008
    Location
    Sheffield, UK
    Beans
    1,517
    Distro
    Ubuntu

    Re: Firefox Passwords - Safe?

    You can create a master password to lock them

  3. #3
    hakermania's Avatar
    hakermania is offline Τώρα ξέρεις τι γράφω εδώ!
    Join Date
    Aug 2009
    Location
    Greece
    Beans
    1,702
    Distro
    Ubuntu Development Release

    Re: Firefox Passwords - Safe?

    Quote Originally Posted by SlugSlug View Post
    You can create a master password to lock them
    This.

    Firefox passwords are NOT safe.

    From my experience most password multistealers (that are generally designed for windows) ignore firefox passwords if you have set a master password.

    This does not mean that the database cannot be bruteforced, so setting one strong master password is highly recommended.
    Website

    Wallch (Wallpaper Changer): Sourceforge | Launchpad

  4. #4
    Join Date
    Jun 2009
    Location
    0:0:0:0:0:0:0:1
    Beans
    4,158
    Distro
    Xubuntu 13.04 Raring Ringtail

    Re: Firefox Passwords - Safe?

    +1 master password
    Laptop: ASUS A54C-NB91 (Storage: WD3200BEKT + MKNSSDCR60GB-DX); Desktop: Custom Build - Images included; rPi Server
    Putting your Networked Printer's scanner software to shame PHP Scanner Server
    I frequently edit my post when I have the last post

  5. #5
    Join Date
    Oct 2008
    Location
    UK
    Beans
    1,147
    Distro
    Ubuntu 13.04 Raring Ringtail

    Re: Firefox Passwords - Safe?

    Thanks very much - all done. I know this seems silly but if I kept a record of the master password in a spreadsheet that is in my Documents folder is it safe from potential threats on the net? My understanding is that Ubuntu/Linux is generally safe (I guess compared to Windoze) from outside threats - would a hacker/threat from the net having access via firefox be able to get into my /home/dad/Documents folder?

  6. #6
    Join Date
    Aug 2007
    Location
    From the land down under
    Beans
    1,245
    Distro
    Ubuntu Development Release

    Re: Firefox Passwords - Safe?

    Quote Originally Posted by Quarkrad View Post
    Thanks very much - all done. I know this seems silly but if I kept a record of the master password in a spreadsheet that is in my Documents folder is it safe from potential threats on the net? My understanding is that Ubuntu/Linux is generally safe (I guess compared to Windoze) from outside threats - would a hacker/threat from the net having access via firefox be able to get into my /home/dad/Documents folder?
    It depends on who is doing the hacking and why... and your paranoia levels.

    It's very easy to be paranoid about security, to the point where you can't trust anything and eventually reach a point where you've done so much to protect yourself this: http://xkcd.com/538/ seems more likely.

    For general web browsing the likelihood of you getting hacked on linux is somewhere between extremely unlikely to none, straight off the bat, you'd have to be a very unlucky person to have this happen just by browsing the web, I'd almost venture out to say that it'll never happen, but absolute statements are wrong all of the time.

    The most likely reality is that someone will download and run a trojan, and even that's extremely unlikely, but if someone was to do that, there's a chance it'll upload your entire home directory and put it up on y00g0thax0red.net. That's the problem with getting owned, if you give a program full access to your computer, you give the program full access to your computer.

    I would put the password in the spreadsheet, as it's the master password to your firefox passwords... given the entire scenario above is unlikely to ever happen, you would not only need to have a bot on your system, because there's no way the bot is going to know that the random numbers and digits in your spreadsheet is your firefox master password, you would need to have someone actively going through your computer remotely, desperately seeking to get access to your firefox master password trying anything he can find. Which at this stage is paranoia more than reality.
    Last edited by ikt; August 10th, 2013 at 11:43 PM.
    // Blog

  7. #7
    Join Date
    Aug 2011
    Beans
    322
    Distro
    Xubuntu 13.04 Raring Ringtail

    Re: Firefox Passwords - Safe?

    There are lots of options that will make things more secure if that is your worry. You could, for example, put your spreadsheet on a USB thumb drive and only mount it when you need it. You could use TrueCrypt to encrypt the file and mount/open it only when you need it. You could use GnuPG to encrypt the file and only decrypt it when you need it. Your spreadsheet program itself probably has the ability to password a file. Some things are more 'secure' than others. There has to be a trade off between ease of use and paranoia. Two things to remember: just because you are paranoid doesn't mean they are not out to get you, and any security system developed/invented by a human can be defeated by a human. I fully agree with ikt above, but will add I have not heard of anyone having problems with Firefox's password security even though it is not particularly strong. The options, as with most things in Linux, are yours.

  8. #8
    Join Date
    Feb 2013
    Beans
    4

    Re: Firefox Passwords - Safe?

    +1 Truecrypt

  9. #9
    Join Date
    Jun 2008
    Location
    Across The Pond
    Beans
    778
    Distro
    Xubuntu 12.04 Precise Pangolin

    Re: Firefox Passwords - Safe?

    Quote Originally Posted by agillator View Post
    There are lots of options .... You could, for example, put your spreadsheet on a USB thumb drive and only mount it when you need it.
    Now that's a good idea. I'll have to look into TrueCrypt as well. (Not that I have anything of real value to encrypt)
    "Everybody is ignorant, only on different subjects." Will Rogers

  10. #10
    Join Date
    Sep 2006
    Location
    France.
    Beans
    Hidden!
    Distro
    Lubuntu 14.10 Utopic Unicorn

    Re: Firefox Passwords - Safe?

    Or use an app that will manage your passwords. One recent thread on LastPass/KeepassX : http://ubuntuforums.org/showthread.php?t=2165372
    | My old and mostly abandoned blog |
    Linux user #413984 ; Ubuntu user #178
    J'aime les fraises.
    Nighty night me lovelies!

    | Reinstalling Ubuntu ? Please check this bug first ! |
    | Using a ppa ? Please install ppa-purge from universe, you may need it should you want to revert packages back |
    | No support requests by PM, thanks |

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •