3 ms·

I was using Secure Login for Firefox for a good while, but it died in e10s era and probably doesn't have the hooks to block this at all in Firefox Quantum. One

I was using Secure Login for Firefox for a good while, but it died in e10s era and probably doesn't have the hooks to block this at all in Firefox Quantum. One of its useful features was to not fill out anything, username/email included, until I clicked a button.

Izkata 9y ago
I haven't upgraded yet, but it sounds like KeePassHelper can do something similar - I have it listed as "try this replacement" for when I do eventually upgrade: https://addons.mozilla.org/en-US/firefox/addon/keepasshelper/ https://addons.mozilla.org/en-US/firefox/addon/keepasshelper... Seems to require some setup though, and stores passwords outside of Firefox?
- Sylos 9y ago
  It integrates with KeePass, which is a proper, OS-level password manager. So, this is a feature, not a limitation. Should be more secure than just making Firefox save them and well, you can make it remember not just passwords from your browser, but rather any password. It also has password management features, such as a password generator, a reminder to change passwords every so often that you can set up, a search feature, and also just can store your various user-names, throwaway e-mail accounts or just general notes that you might have. KeePass is open-source and has sort of developed to a standard. For example, there's also KeePassXC, which you should be able to use with this extension as well and which generally works better on Linux or macOS (because the original KeePass is written in C#). There's also various apps for Android and iOS. It stores the passwords in a .kdbx-file, which is encrypted with one single password that you will have to remember, and then you can safely throw that .kdbx-file into any sort of cloud storage or file sync service to make it available on all your devices. Mind that theoretically this extension or those various other clients could be malicious and steal your passwords. I'm 99% sure that KeePass itself, KeePassXC and KeePassDroid are not malicious (I do use those myself and they have a reasonably big following), but I really cannot comment at all on this extension's trustworthiness.
- kevin_b_er 9y ago
  Not much of a replacement when I'm fine with firefox's password manager. It seems plenty secure when a master password is set and thus the passwords are encrypted at rest.
  - thuspoint 9y ago
    > when a master password is set and thus the passwords are encrypted at rest They are not https://bugzilla.mozilla.org/show_bug.cgi?id=1284343 https://bugzilla.mozilla.org/show_bug.cgi?id=1284343

Izkata 9y ago

I haven't upgraded yet, but it sounds like KeePassHelper can do something similar - I have it listed as "try this replacement" for when I do eventually upgrade: https://addons.mozilla.org/en-US/firefox/addon/keepasshelper/ https://addons.mozilla.org/en-US/firefox/addon/keepasshelper... Seems to require some setup though, and stores passwords outside of Firefox?

Sylos 9y ago
It integrates with KeePass, which is a proper, OS-level password manager. So, this is a feature, not a limitation. Should be more secure than just making Firefox save them and well, you can make it remember not just passwords from your browser, but rather any password. It also has password management features, such as a password generator, a reminder to change passwords every so often that you can set up, a search feature, and also just can store your various user-names, throwaway e-mail accounts or just general notes that you might have. KeePass is open-source and has sort of developed to a standard. For example, there's also KeePassXC, which you should be able to use with this extension as well and which generally works better on Linux or macOS (because the original KeePass is written in C#). There's also various apps for Android and iOS. It stores the passwords in a .kdbx-file, which is encrypted with one single password that you will have to remember, and then you can safely throw that .kdbx-file into any sort of cloud storage or file sync service to make it available on all your devices. Mind that theoretically this extension or those various other clients could be malicious and steal your passwords. I'm 99% sure that KeePass itself, KeePassXC and KeePassDroid are not malicious (I do use those myself and they have a reasonably big following), but I really cannot comment at all on this extension's trustworthiness.
kevin_b_er 9y ago
Not much of a replacement when I'm fine with firefox's password manager. It seems plenty secure when a master password is set and thus the passwords are encrypted at rest.
- thuspoint 9y ago
  > when a master password is set and thus the passwords are encrypted at rest They are not https://bugzilla.mozilla.org/show_bug.cgi?id=1284343 https://bugzilla.mozilla.org/show_bug.cgi?id=1284343