cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
SamuelNi
New member
Status: Delivered

Hello, I am Samuel. Firefox is a magnificent product, but the password manager is quite weird that it is not password protected naturally, so I need to give it a primary password. The problem now is I need to input that primary password many times even though I didn't use the password. I know it might be designed for security, so can you integrate it with Windows Hello like Chrome, so I can use fingerprints or IR camera when I need to input the primary password? Or you can reduce the scenery where I need to input the password and make it only happen when I am using the password manager? Thanks a lot.

19 Comments
RorriNator
New member

Good afternoon,

The password manager should have a passkey using Windows credentials.

Best wishes to all.

OmbasaOnyoni
New member

Kindly add this feature to firefox

Status changed to: Delivered
Jon
Community Manager
Community Manager

Hey all,

OS Authentication for passwords shipped in Firefox 127. Learn more about the feature here:

https://support.mozilla.org/en-US/kb/firefox-password-authentification-prompt

Check it out and let us know if you have any questionsโ€”we look forward to continuing to collaborate with you all here on Connect ๐Ÿ’ช

FirefoxConnect
Making moves

Thank you for the update, @Jon!

The new feature, while very nice (and also indicative of the willingness to listen to users and to invest hard work in collaborating with them!), is currently not meaningful:
even when the feature is enabled, authentication is not required when -
1. Auto-filling passwords in an actual website (not in the password manager)
2. Revealing auto-filled passwords in an actual website (not in the password manager)
3. Opening the password manager and viewing websites with saved passwords

This means that anyone can just view all websites with saved passwords, navigate to them, ask FF to auto-fill them, and then reveal them, all without having to authenticate even once.

For the feature to be meaningful, OS authentication should be required when auto-filling/revealing passwords in an actual website (not in the password manager), and when opening the password manager.

Is such an improvement planned?

Thank you! โค๏ธ