Browser: Firefox extension remembers my password

Created on 4 Nov 2019 · 3Comments · Source: bitwarden/browser

When trying to unlock my vault, clicking on the extension I see that Bitwarden remembers my password. Just by pressing unlock, it unlocks. Is this normal?

Latest Firefox and Bitwarden versions, macos catalina (happened to previous version of macos too)

Source

kosvrouvas

👍1

All 3 comments

Yes, since Firefox see this as a login form. You should probably disable Firefox's built-in password manager.

kspearrin on 4 Nov 2019

👍1

In addition, there's this "show password" button. Someone would need just a second, when your back is turned, to see your master password. Then we go from 2FA to 1FA ;) Why is this button even there (in the desktop clients also)? Seems unreasonable and dangerous. On mobile, perhaps; it's sometimes hard to write a long password with the on-screen keyboard, but I'd definitely remove this button on the desktop. If there was a discussion about it already I couldn't find it.

dioptryk on 7 Nov 2019

👎4 👍1

@dioptryk who would leave their password written on a login form and leave their PC without locking it? smh
Removal of the "show password" button is very unlikely to happen in any nearby release.

Now, on regards to OPs issue, as kspearrin said, odds are bitwarden's vault password was auto-filled by another password manager. Such as, firefox's built-in password manager