topic Re: Thunderbird email password security flaw in Discussions

Thunderbird email password security flaw

SamirTavares1 — Mon, 30 Jun 2025 15:16:55 GMT

Dear all;

There is a SERIOUS security flaw in Thunderbird email passwords, when Thunderbird exports SMTP email passwords to mobile devices, any user can read the QR code and take the email log home and interact as if they were the user.
Google emails require two-step authentication, but other emails end up being stolen along with the password by any cell phone that has the Thunderbird app without any security. This way, employees can steal corporate email accounts without authorization.

Re: Thunderbird email password security flaw

siffemcon — Mon, 30 Jun 2025 18:53:27 GMT

You can report bugs at https://github.com/thunderbird/thunderbird-android/issues/new/choose/.

Re: Thunderbird email password security flaw

wsm — Sun, 13 Jul 2025 21:11:18 GMT

@SamirTavares1 you can choose in Thunderbird desktop to NOT export passwords. Are you sure smtp passwords are included when you do this? If it does, then the place to report desktop bugs is https://bugzilla.mozilla.org/enter_bug.cgi?product=thunderbird

Re: Thunderbird email password security flaw

Leecpa — Mon, 06 Oct 2025 22:54:46 GMT

When I press Cancel twice, at the password screen, my mail system opens up. What is going on?

Re: Thunderbird email password security flaw

siffemcon — Tue, 07 Oct 2025 01:38:47 GMT

Different problem, please make a new post at https://support.mozilla.org/en-US/questions/thunderbird.