cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
innovation
New member
Status: New idea

Existing primary password for Firefox:       prevents from filling in and changing passwords, but you can just cancel the dialog box and use all websites including email etc. with PREFILLED passwords -> not so secure when people around you. When credit cards on shopping websites are registered, someone could make orders, for example...

Super primary password (super primary plus primary):  if activated and the browser started, you must fill in a "super primary" so that it unblocks the browser. You can only browse when you unblock the blocked browser after a fresh start. When the browser is closed, it again blocks the browser completely, but can be unblocked again by filling in the "super primary".

-> feature request for the "super primary password" (primary and super, complete block of browser that needs to be unblocked after restart)

3 Comments
Status changed to: New idea
Jon
Community Manager
Community Manager

Thanks for submitting an idea to the Mozilla Connect community! Your idea is now open to votes (aka kudos) and comments.

drjukebox
Strollin' around

“Current Firefox Primary Password only protects stored credentials, but the browser can still be browsed without unlocking, exposing prefilled passwords and payment data. We propose a ‘Super Primary Password’ feature that blocks the entire browser on startup until entered, effectively securing all tabs, autofill, and sensitive data. Optional integration with biometric unlock and ledger-style logging would enhance usability and auditability. This would provide a stronger security model for shared devices, automated workflows, and high-value accounts.” --Xdjb    

TechHorse
Familiar face

Would the super primary password also unlock the logins?

If it did, this would not please the users who do not want their logins exposed more than necessary. As at present they can enter their primary password to unlock logins for a few minutes when signing into a site, and then relock them straight after. So they would want independent unlocks for the overall browser and the logins.

On the otherhand, If it does not, this might not please Sync users for example, who have to enter the primary password at the beginning of each session. As they would now need to enter two passwords at every Firefox start-up. First the super primary password, and then the primary password.