Big Firefox Security Flaw?

[peteyt]

I've emailed this to Mozilla before.

Now I save some passwords to my password manager, especially sites I rarely use, so I don't have to keep remembering. When I first downloaded Firefox quite a few years ago I didn't put a password on my password manager. Didn't think of doing so, and I recieved no warning. I liked the fact it remembered all my passwords without any input from me.

However I forgot one of my passwords - I had it saved obviously but wanted to use it other places as well as my own PC - so I went into my password manager and clicked show passwords. And of course it showed me all my saved passwords.

My problem is, shouldn't Mozilla give a warning that if you don't put a password onto the password manager, then anyone who gets access to it could simply reveal all your passwords with the click of a button. I've got security products and stuff, but if someone managed to bypass them, they could have gained access to most of the sites and services I use.

Now this was a few years ago. But I can imagine it happening to others, especially those who are new to computing. It just seems like a big security issue to me, or am I looking too deep?

[Special]

well no because only you can see them anyway & if firefox didn't do that it wouldn't be saving your passwords really lol

[myke]

they have to have access to your computer first?

it's like that with safari on my mac, not a big flaw tbh.

it's supposed to be like that

therefore there's no flaw

if you are worried - dont save your passwords

[xxMATTGxx]

To be honest, they will just say it's up to the user to put a master password on Firefox. So when Firefox uses any of the passwords or you need to "see" them for whatever reason then you have to type in the master password.

[N!ck]

Set a master password. That's what I do.

[peteyt]

Yeah thats what I've done for ages. But it wouldn't harm Firefox to have a little warning for the first time someone saves a password e.g.

"You are about to save a password. We reccomend you click here to create a master password, to prevent unathorised access." or something similar