Protecting Stored Passwords using a Master Password

• https://support.mozilla.com/en-US/kb/Protecting%20stored%20passwords%20using%20a%20master%20password
• http://kb.mozillazine.org/Master_password

Check and tell if its working.

Sorry but I think you did not understand my testing scenario. I have already set up master password, I have been using it since firefox 2.0 or even earlier. The obvious path to check your saved passwords, if you have already set up master password, is to open Preferences ->security -> saved passwords. Then click on "show passwords" button and give the master password in order to see them. "The bug" is that you don;t need to provide the master password again if you, before pressing the show passwords button, right click on any entry of the list and select copy password. Again I am mentioning that this will have only if after opening your browser, at some point you have provided at least once the master password to access for example a site.

Yes that is how it works.

You already have entered the master password to see the names and that means that you also have access to the passwords. The fact that Firefox ask once again to enter the master password to see the stored passwords is not actually required, but is only done to make it more difficult. Firefox 4+ adds the feature to copy the password to the clipboard is case you cant enter it anymore on a website because they changed the code or the URL. Firefox 4+ will automatically log out of the software security device after 30 minutes (security.password_lifetime) and requires to re-enter the master password. You can log out manually if you click Cancel after opening Show Passwords.