**Problem**
When you step away from your laptop, or hand it to someone else briefly, any logged-in website (email, banking, social media) sitting open in a tab is fully visible. Right now the only options are closing the tab, logging out, or locking the entire OS — all more disruptive than the situation usually calls for.
**Proposed Feature: Per-Site Lock, from a new browser side menu**
A new "Site Lock" section in Firefox's side menu (next to Passwords), gated behind your Firefox Primary Password (with the existing forgot-password recovery flow if needed). Each site keeps its own separate saved password, as it does today — this feature doesn't introduce a single shared credential across sites.
From this menu, for any saved site, you can:
1. **Lock it** — instantly hides that site's tab/content behind a simple cover screen. The tab stays open in the background; the content is just hidden until unlocked.
2. **Unlock it** — remove the lock yourself instantly with your Primary Password.
3. **Generate Temporary Access** — if someone else needs to get into that locked site (a shared account, a colleague continuing your work, a family member), you can create a temporary passkey for that specific site directly from the menu, from wherever you're logged in — no need to open the site or be logged into it at that moment. Generating a temporary key always requires your Primary Password to confirm. You choose:
- 1-time use, or
- A set number of logins, or
- Expires after a set time
Your real password is never shared or exposed. This option is also surfaced directly on the recovery screen below, so you don't have to navigate elsewhere to create one.
4. **Forgot Password / Revoke Access** — a recovery flow that instantly invalidates any active temporary credentials for that site and resets access. Whenever this is used, or whenever a temporary key is generated, the account owner gets an email/SMS notification — so you always know if access to your account was created or changed, even if you weren't the one who triggered it.
**Why this is different from just locking the whole browser**
- It's scoped per-site, not all-or-nothing — you keep working in other tabs normally.
- It doesn't require logging out or closing anything.
- Sharing access to one account no longer means sharing your real password or manually resetting it afterward.
- You're notified of any access change or temporary key creation, closing the blind spot of someone else granting or resetting access without your knowledge.