Skip to content
This repository has been archived by the owner on Feb 20, 2023. It is now read-only.

Concept of "Master Password" in Firefox mobile edition to stop non-admin users from viewing saved login credential. #17090

Closed
PranavBhattarai opened this issue Dec 17, 2020 · 3 comments
Labels
Feature:Logins feature request 🌟 New functionality and improvements

Comments

@PranavBhattarai
Copy link

PranavBhattarai commented Dec 17, 2020

Humans share their smartphones due to various reasons. Since not everyone owns a device to play with.
If u don't give them a phone, they might think u might have something bad running in the phone, or might take this as egotistic behavior. So you have to give your device depending on different circumstances one might experience.
The problem with this dilemma is privacy. You can trust your family members, relatives, close friends but every time there a question might pop in your brain like, "what if".

Currently, FF asks for a user fingerprint or pin to control who can and who can't view saved logins, which is nice but not enough. This can be still too dangerous in day-to-day "family" life. A new fingerprint can be added easily, password pin can be shared with the person whom you are giving your phone for many reasons/circumstances.

The only nice solution toward this issue is the concept of MASTER PASSWORD we see the Firefox desktop version.
This is great.

Anyone trying to go see about:logins will require a master password to see the content. I think this concept should be on Firefox mobile version too.

By keeping the current mechanism, there should be an alternative option that blocks people from viewing saved logins.

┆Issue is synchronized with this Jira Task

@github-actions github-actions bot added the needs:triage Issue needs triage label Dec 17, 2020
@cadeyrn
Copy link
Contributor

cadeyrn commented Dec 17, 2020

Duplicate of #14501 and #15147.

@PranavBhattarai
Copy link
Author

PranavBhattarai commented Dec 17, 2020

@cadeyrn This is bad news. Ignoring the major security issue which can be technically solved using Master Password.
@liuche Please rethink this scenario and open that issue.

@amedyne amedyne added feature request 🌟 New functionality and improvements Feature:Logins and removed needs:triage Issue needs triage labels Dec 17, 2020
@ekager
Copy link
Contributor

ekager commented Dec 17, 2020

We will not be adding support for master password re this comment #14501 (comment)

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
Feature:Logins feature request 🌟 New functionality and improvements
Projects
None yet
Development

No branches or pull requests

4 participants