Big Firefox Security Flaw?

I've emailed this to Mozilla before.

Now I save some passwords to my password manager, especially sites I rarely use, so I don't have to keep remembering. When I first downloaded Firefox quite a few years ago I didn't put a password on my password manager. Didn't think of doing so, and I recieved no warning. I liked the fact it remembered all my passwords without any input from me.

However I forgot one of my passwords - I had it saved obviously but wanted to use it other places as well as my own PC - so I went into my password manager and clicked show passwords. And of course it showed me all my saved passwords.

My problem is, shouldn't Mozilla give a warning that if you don't put a password onto the password manager, then anyone who gets access to it could simply reveal all your passwords with the click of a button. I've got security products and stuff, but if someone managed to bypass them, they could have gained access to most of the sites and services I use.

Now this was a few years ago. But I can imagine it happening to others, especially those who are new to computing. It just seems like a big security issue to me, or am I looking too deep?

well no because only you can see them anyway & if firefox didn't do that it wouldn't be saving your passwords really lol

they have to have access to your computer first?

it's like that with safari on my mac, not a big flaw tbh.

it's supposed to be like that

therefore there's no flaw

if you are worried - dont save your passwords

To be honest, they will just say it's up to the user to put a master password on Firefox. So when Firefox uses any of the passwords or you need to "see" them for whatever reason then you have to type in the master password.

Set a master password. That's what I do.

Yeah thats what I've done for ages. But it wouldn't harm Firefox to have a little warning for the first time someone saves a password e.g.

"You are about to save a password. We reccomend you click here to create a master password, to prevent unathorised access." or something similar