Security of saved passwords
Hi everyone, I would like to know the way of saving passwords. Are they saved as plaintext ? Or ciphered and locally saved ? Is the Firefox solution as safe as Dashlane or other crypto-secure ways to save passwords ? Is there a technical documentation from Firefox about this topic ? Thanks in advance for your answers ;)
Modified by Amb02
الحل المُختار
Within the Firefox user profile, the information is encrypted using two files. logins.json and key3.db [v58+]key4.db : These are the password files.
Password:Recovery:Restore:Export
https://www.ghacks.net/2018/07/18/how-to-export-firefox-passwords-in-firefox-57/
+++++++++++++++++++++++++++++++++++++++++
http://www.nirsoft.net/utils/passwordfox.html
(Win) PasswordFox v1.58 - Extract the usernames/passwords
stored in Firefox Copyright (c) 2008 - 2017 Nir Sofer
Note: Some anti-virus show false positive. +++++++++++++++++++++++++++++++++++++++++ Easily export your passwords from Firefox. https://github.com/kspearrin/ff-password-exporter
Export your passwords from Firefox in a portable CSV or JSON format. It works on Windows, macOS, and Linux. +++++++++++++++++++++++++++++++++++++++++ 3 Tools to Decrypt and Recover Passwords Saved in Firefox • Raymond CC https://www.raymond.cc/blog/how-to-find-hidden-passwords-in-firefox/ +++++++++++++++++++++++++++++++++++++++++ https://www.ghacks.net/2018/07/18/how-to-export-firefox-passwords-in-firefox-57/ +++++++++++++++++++++++++++++++++++++++++ https://github.com/kspearrin/ff-password-exporter +++++++++++++++++++++++++++++++++++++++++ If you don't find a third party script or program you can trust, you can run a script in Firefox's Browser Console to spit out the list in CSV or JSON format. For example:
JSON file: https://support.mozilla.org/questions/1258644
CSV: https://support.mozilla.org/questions/1253828 (copy/paste from console)
chrome://passwordmgr/content/passwordManager.xul
chrome://passwordmgr/content/passwordManager.xhtml
Read this answer in context 👍 1All Replies (1)
الحل المُختار
Within the Firefox user profile, the information is encrypted using two files. logins.json and key3.db [v58+]key4.db : These are the password files.
Password:Recovery:Restore:Export
https://www.ghacks.net/2018/07/18/how-to-export-firefox-passwords-in-firefox-57/
+++++++++++++++++++++++++++++++++++++++++
http://www.nirsoft.net/utils/passwordfox.html
(Win) PasswordFox v1.58 - Extract the usernames/passwords
stored in Firefox Copyright (c) 2008 - 2017 Nir Sofer
Note: Some anti-virus show false positive. +++++++++++++++++++++++++++++++++++++++++ Easily export your passwords from Firefox. https://github.com/kspearrin/ff-password-exporter
Export your passwords from Firefox in a portable CSV or JSON format. It works on Windows, macOS, and Linux. +++++++++++++++++++++++++++++++++++++++++ 3 Tools to Decrypt and Recover Passwords Saved in Firefox • Raymond CC https://www.raymond.cc/blog/how-to-find-hidden-passwords-in-firefox/ +++++++++++++++++++++++++++++++++++++++++ https://www.ghacks.net/2018/07/18/how-to-export-firefox-passwords-in-firefox-57/ +++++++++++++++++++++++++++++++++++++++++ https://github.com/kspearrin/ff-password-exporter +++++++++++++++++++++++++++++++++++++++++ If you don't find a third party script or program you can trust, you can run a script in Firefox's Browser Console to spit out the list in CSV or JSON format. For example:
JSON file: https://support.mozilla.org/questions/1258644
CSV: https://support.mozilla.org/questions/1253828 (copy/paste from console)
chrome://passwordmgr/content/passwordManager.xul
chrome://passwordmgr/content/passwordManager.xhtml