1

I am wondering about the safety of my passwords stored in FF > 57.

I guess passwords stored in a Keepass database file are safe against cracking, as much as possible given its AES algorithm.

Are passwords stored in FF builtin password manager are as safe as that, given its algorithm?

1

Well, they are encrypted with AES, but they are not as safe. FF does not use slow key derivation function, which allows the password to be brute forced. Also sync is not encrypted anywhere as well, so you should at least disable sync on FF. In general, FF is convenient and secure enough for basic protection but not as secure as keepass.

  • 4
    “Also sync is not encrypted anywhere as well, so you should at least disable sync on FF.” Really? I was under the impression that everything was encrypted. It says so here: blog.mozilla.org/services/2014/04/30/… – Kevin Li Apr 23 '18 at 10:46

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.