Mozilla Firefox has the feature that allows you to store your passwords for you. The passwords are encrypted and stored on your computer. However, in case you forget your password, you can open up the Preferences/Options menu and see your passwords under the 'Security' tab.

This isn't a security problem as long as long as you have a password protected account on the computer and log off or lock your computer when you are not using the computer. But if someone was to use your computer even for a few minutes, they would be able to look at your passwords.
Disabling the 'Save Passwords' feature is one option, but having your passwords saved is a useful feature to have. Another option is to set a 'Master Password' and only if you enter the 'Master Password' can you access the other passwords.
One other option is to hide the passwords completely. You can do this by editing the '
passwordManager.xul' file. In Linux this would be under '
/usr/share/firefox/chrome/toolkit/content/passwordmgr' (depending on where you installed firefox). You can edit the .xul file directly.
On Windows, the toolkit is compressed and stored as a jar file (
Program Files\Mozilla Firefox\chrome\toolkit.jar). You have to extract the .jar file and can find the .xul file under
content\passwordmgr\. Once you edit the .xul file, you will need to re-compress the content folder using zip compression and name it
toolkit.jar.
Editing passwordManager.xul1. Before you go any further, make a backup of the
passwordManager.xul file (or
toolkit.jar on Windows).
2. Open the file for editing and look for the lines:
<button id="togglePasswords">
oncommand="TogglePasswordVisible();"/>3. Delete or comment these lines out (<!-- code --> to comment).
Optionally, you can also delete or comment out the code for the button
removeAllSignons.
4. Save the file. On Linux, you are done. Just restart Firefox.
Under Windows, you need to make the new
toolkit.jar file. Just re-archive the content folder and name the archive
toolkit.jar and replace the old one. Restart Firefox.
The result should be a clean password list window.

Labels: Firefox