Don't save passwords as plain text but rather integrate with OS storage system

[gunwald]

Unfortunately, Thunderbird still saves all passwords as plain text, which puts them at risk to anyone who has access to your computer. While there is an option to use a master password, it is not commonly used and does not integrate seamlessly with the operating system you are using.

[Jon]

Thanks for submitting an idea to the Mozilla Connect community! Your idea is now open to votes (aka kudos) and comments.

[crazybyte]

This similar, but not the same as this idea. Both ideas can definitely be integrated with the Secret Service Provider protocol.

[Jon]

Hey all,

This idea is now a “Trending idea” here on Mozilla Connect, which means it’s one step closer to reaching our internal teams for review—learn more about The Idea Journey.

Please keep the conversation going (the more details to support your case, the better) and stay tuned for updates 😀

[Ford_Prefect]

I disagree with a forced storage within the os. Having had a similar situation with android, nothing is more frustrating then not beeing able to retrieve the passwords later. The advantage of software level storage should not be undervalued.

[crazybyte]

I'm not sure what kind of setup do you have, if the OS doesn't allow you to safely access your secrets then I would complain to them. If you check the idea I explained here, you'll see I proposed to use the Secret Service Provider protocol. Since it's a standard protocol, it allows you to use whatever password manager you prefer (as long as it complies with this standard protocol) and there are lots of products you can choose from.