Mozilla Firefox can now secure access to passwords with device credentials

News
By published

Mozilla Firefox adds another layer of password protection

Viersen, Germany - June 9. 2021: Closeup of mobile phone screen with logo icon of mozilla firefox browser on computer keyboard (focus on left upper part of logo). Editorial Use Only
(Image credit: Shutterstock / Ralf Liebhold)

Mozilla Firefox has introduced a new feature allowing users to protect their passwords and sensitive information against hackers that obtain remote or physical access to their device.

As is standard for many of its competitors, Firefox can create secure passwords and store them in the browser to make it easier for users to quickly log in to accounts when online.

Latest Videos From

Additional layer of security

The credentials stored within the browser will be accessible using your device’s built in biometrics such as a fingerprint or facial recognition, or can be accessed using a password.

The release notes state that, “For added protection on MacOS and Windows, a device sign in (e.g. your operating system password, fingerprint, face or voice login if enabled) can be required when accessing and filling stored passwords in the Firefox Password Manager about:logins page.”

While the feature is a welcome one, it does not fully protect against information stealing malware, as the credentials are encrypted and stored on a local disk, they can still be stolen by attackers and decrypted using the key stored in the Firefox data. To mitigate this, Firefox recommends that users set a high-strength primary password to encrypt the credentials storage, which will not be stored on the device and is known only to the user.

This primary password is still vulnerable to brute force attacks though, so it is further recommended to use one of the best password generators to ensure the primary password cannot be easily compromised.

More from TechRadar Pro

Benedict Collins
Benedict Collins
Senior Writer, Security

Benedict is a Senior Security Writer at TechRadar Pro, where he has specialized in covering the intersection of geopolitics, cyber-warfare, and business security.

Benedict provides detailed analysis on state-sponsored threat actors, APT groups, and the protection of critical national infrastructure, with his reporting bridging the gap between technical threat intelligence and B2B security strategy.

Benedict holds an MA (Distinction) in Security, Intelligence, and Diplomacy from the University of Buckingham Centre for Security and Intelligence Studies (BUCSIS), with his specialization providing him with a robust academic framework for deconstructing complex international conflicts and intelligence operations, and the ability to translate intricate security data into actionable insights.