Thunderbird email password security flaw

[SamirTavares1]

Dear all;

There is a SERIOUS security flaw in Thunderbird email passwords, when Thunderbird exports SMTP email passwords to mobile devices, any user can read the QR code and take the email log home and interact as if they were the user.
Google emails require two-step authentication, but other emails end up being stolen along with the password by any cell phone that has the Thunderbird app without any security. This way, employees can steal corporate email accounts without authorization.

[siffemcon]

You can report bugs at https://github.com/thunderbird/thunderbird-android/issues/new/choose/.

[wsm]

@SamirTavares1 you can choose in Thunderbird desktop to NOT export passwords.  Are you sure smtp passwords are included when you do this?  If it does, then the place to report desktop bugs is https://bugzilla.mozilla.org/enter_bug.cgi?product=thunderbird

[Leecpa]

When I press Cancel twice, at the password screen, my mail system opens up. What is going on?

[siffemcon]

Different problem, please make a new post at https://support.mozilla.org/en-US/questions/thunderbird.