You can reset your primary password if you forget it, but as you’d expect from a zero-knowledge system, this will erase all stored passwords. You can enable two-factor authentication, requiring a TOTP (Time-Based One Time Password) or single-use recovery code as well as your password to connect.

Mobile users can use biometrics to unlock their browser, and a breach monitoring service is also available for stored credentials. Unfortunately, unlike every other password manager I’ve tested, Firefox requires a different primary password for each device, which removes much convenience and means that you have to manually secure every computer you have Firefox installed and your passwords synced on. In Firefox’s main settings, you can tick a box to enable a primary password, and this will then be required every time you view your passwords on any synced version of Firefox, and every time you restart the browser to avoid autofill abuse by someone with access to your browser. However, actually having the ability to set a primary password is something that Firefox does much better than rival Chrome. It’s obviously been made for the benefit of Sync users who don’t want to deal with entering an extra password every time they open their browser, but in pure security terms, I’d like to see Firefox either oblige primary password use for any account that stores passwords in the browser or specifically prompt users to make their own decision about this setting as soon as a password is stored. However, anyone with physical access to your browser can simply view your passwords in Firefox’s password page unless you specifically enable the Use a Primarly Password feature under Firefox’s Logins and Passwords setting. Your passwords are encrypted before being synced, subject to the usual HTTPS-grade TLS encryption when in transit, and still encrypted when stored online and on your hard drive, using a unique key based on your Firefox account password. Mobile users can use biometrics to unlock browserįirefox Password Manager isn’t fully set up by default when you first create a Firefox Sync account, even if you enable password syncing.Requires different primary password for each device.

Like a Firefox Sync account, which it requires, Firefox Password Manager is completely free. As a result, it’s far from being one of the best password manager options currently available. However, it’s still seriously lacking in features compared to bespoke password managers such as LastPass and Bitwarden. But with a user-defined, zero-knowledge primary password and consistently rolled-out versions, Firefox Password Manager is a far more solid proposition than Google’s Password Manager. This is essentially Firefox’s own take on Google’s Password Manager which is integrated into the Chrome web browser. The Firefox Password Manager is integrated into every Firefox Sync account and, once activated, will synchronize and secure your passwords across every Firefox browser you have signed into your account.

Firefox login