We're calling on all EU-based Mozillians with iOS or iPadOS devices to help us monitor Apple’s new browser choice screens. Join the effort to hold Big Tech to account!

Avatar for Username

Pomoc pśepytaś

Glědajśo se wobšudy pomocy. Njenapominajomy was nigda, telefonowy numer zawołaś, SMS pósłaś abo wósobinske informacije pśeraźiś. Pšosym dajśo suspektnu aktiwitu z pomocu nastajenja „Znjewužywanje k wěsći daś“ k wěsći.

Dalšne informacije

Toś ta nitka jo se archiwěrowała. Pšosym stajśo nowe pšašanje, joli trjebaśo pomoc.

Can the manage password files be hacked and deciphered?

  • 1 wótegrono
  • 1 ma toś ten problem
  • 17 naglědow
  • Slědne wótegrono wót cor-el

franksgreen
franksgreen
more options

I had gone to a site where I got infected with hijack trojan siredef.c. I knew it immediately and scanned with Malware Bytes. I found and quarantined the malware but changes were done that prevented me from accessing the internet. A professional IT person got everything working again an purged any remnants of this trojan malware. Was there any chance that the Mozilla password storage information may have been hacked?

I had gone to a site where I got infected with hijack trojan siredef.c. I knew it immediately and scanned with Malware Bytes. I found and quarantined the malware but changes were done that prevented me from accessing the internet. A professional IT person got everything working again an purged any remnants of this trojan malware. Was there any chance that the Mozilla password storage information may have been hacked?

Wšykne wótegrona (1)

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

The names and passwords stored in logins.json are encrypted with an encryption key that is stored in the key3.db file. The master password adds an additional level to this encryption. If you do not use a master password then having access to key3.db and logins.json is sufficient to have access to the encrypted names and passwords by placing the two files in a Firefox profile folder.

When you enter the Master Password when prompted then you log in to the Software Security Device and it is possible to have access to the stored passwords until you log out of the Software Security Device.

You can log out from the Software Security Device (e.g. click Cancel in the Show Passwords dialog) to force re-entering the MP once again.

  • Options > Security: Passwords: "Saved Passwords" > "Show Passwords"