Require Primary Password for Firefox to Save Passwords

[shefty]

Hello,

I love Firefox and recommend it to my clients; however, I don't recommend using the password manager because it does not seem to be automatically protected. Please correct me if I'm wrong but my understanding is that without the requirement to first create a Primary Password, a malicious actor with access to the browser could export all passwords with no need for authentication. Is there something stopping a phishing email (that is clicked on) from doing just this?

If not, then I'd love to see a Primary Password requirement in order to use Firefox's password manager. 

Thanks!

[Jon]

Thanks for submitting an idea to the Mozilla Connect community! Your idea is now open to votes (aka kudos) and comments.

[Jon]

Potentially related idea here: Primary password/system password only when viewing passwords. Not at opening the browser 

[shefty]

Thanks for the input, Jon.

I am suggesting that a primary password be enabled/required before using the password manager. This is a different idea from when the primary password (if it is enabled) is prompted. I actually like that it's prompted when opening the browser (to prevent someone from using autofill) and again when viewing passwords (to prevent accidental spillage).

Thanks!