02-04-2026 11:22 AM - edited 02-04-2026 11:32 AM
I used Firefox on my Surface Go tablet today, as I do every single day. System is Windows 10.
For the first time, I had a double issue come up... and it's very disturbing:
1- Firefox erased overwrote a saved password (from 2024) in favor of a new "strong password" as if I was creating a new account (see screenshot)
2- I open Chrome (was not running prior) and that "strong password" showed up on Chrome as soon as I opened the browser. Except I NEVER allowed for Chrome or Firefox to exchange passwords!
Context:
- Google Chrome has been installed for a while on my device but was NOT open at all: I do not use it more than 3-5 times a year if I need to troubleshoot something regarding a specific website. It has no passwords saved, usually no history or cookies either.
1 - Went on a website via Firefox, tried to open an existing account that should've autofilled. Firefox erased an existing password in favor of a "strong password" without me agreeing to saving/updating any new login info.
Note: You can see "Used" on April 2 (today) because I didn't know my old password had be overwritten yet. I found out when I couldn't sign in and opened my password manager. The new password didn't actually work since it was NOT the actual password for my account.
This forced me to try and retrieve my account by clicking "forgot password" on the website. The email took too long to arrive so I decided to open Chrome to troubleshoot.
2- As I go on the same website via Chrome, to repeat the "forgot password" step again that new "strong password" from Firefox pops up on Chrome and autofills!!!
I want to know what is going on with our private data, this never happened to me before and is UNSAFE!
16-04-2026 08:36 AM
Thank for reporting this, for following up, there is a Bugzilla bug: https://bugzilla.mozilla.org/show_bug.cgi?id=2029497