Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I do know the answer to this - Firefox is not an acceptable alternative to a strong password manager. Local admin can dump any passwords from Firefox, and I think a user can even dump their own passwords from Firefox on windows and Linux.


I don't think that matters. Local admin can also install a rootkit or a keylogger. Physical/admin access is game over no matter what you use.


They do have a "primary password" these days which I believe encrypts the locally stored passwords and the locally stored sync key.




Consider applying for YC's Summer 2026 batch! Applications are open till May 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: