Reveal password security

[Kimco]

Hello. I recently realized that the recent release of Mozilla had the reveal password feature. As much as this is a great feature, it circumvent the master password security feature. To clarify, the master password was put there to secure our login details. However with this new reveal password feature, anyone can just see the password without the need to enter the master password. What is the need for a master password if the reveal password feature renders it useless. I want the reveal option to be linked with the master password as well. If you need to reveal your password, you need to enter the master password. That will make it much more secure like it intended to be. Thank you.

[Jon]

Thanks for submitting an idea to the Mozilla Connect community! Your idea is now open to votes (aka kudos) and comments.

[CakesTheMacMan]

In addition to FF offering its own method for revealing passwords without requiring the Primary Password to be entered, some websites show the eyeball icon in their password fields.  Both of these methods will reveal passwords entered automatically by the FF password manager.

I would like to be able to store passwords for use, but I never want them visible unless I enter my Primary Password.  This is a feature that Safari had on Mac for at least 20 years.  Are web sites overriding this somehow?

I can understand having the eyeball feature for when you are manually typing in a password, or when you are creating a new password... but it should always be disabled when using a password manager.

[Isabella]

Hi @Kimco as of version 127, you can enable OS authentication for passwords - just navigate to settings and enable "Require device sign in to fill and manage passwords". Firefox will then ask you for your device password before revealing any saved passwords.

[CakesTheMacMan]

Thanks @Isabella but I don't see that option in FF 129.0.  I am on Linux, but I am not sure that matters.  All I see is Primary Password, which does not lock down the password visibility outside of the password manager.  I have the Primary Password option turned on, so FF asked me to enter it at launch and doesn't ask again unless I want to use the password manager.  Any saved passwords will be auto entered on websites.  Some of those websites offer their own eyeball option which will display the auto-entered password.

Many of these websites have only recently added this feature.  Previously it was not a problem.  I could simply remove those saved passwords for those particular sites... but that wouldn't help with other sites if they chose to implement that eyeball feature at some point in the future.