The previous days I found a nasty malware on my PC. I observed that it has stolen the saved passwords out of my browser and it tried to impersonate my browser on another device (located in Nepal/Vietnam). Some of my accounts were smart enought to block the login and request a password change (ex. Google, Instagram), but some other accounts were unfortunately accessed (even with 2FA activated) and some activity was made (ex. Steam).
I would like an option, like on mobile, to access the Passwords menu ONLY after entering a password or maybe entering a 2FA password.
I don't know if the passwords stored in the browser are encrypted (I mean the local DB or the file that stores them, or the sessions, etc.), but it would be also a good idea to encrypt those.
Firefox