I would absolutely love to have this on Android and available worldwide.
Firefox Lockbox
21–30 of 156 posts
Re: Firefox Lockbox
#22I would absolutely love to have this on Android and available worldwide.
I'm betting it's in the works already.
Edit: Yes, can confirm. It is in the works. [0]
[0] https://goo.gl/forms/ZwLIfHSGLrYcM6k83 (link from the announcement article)
Re: Firefox Lockbox
#23Does this have safari integration? Will it support iOS 12 auto fill? Most importantly, how likely is this gonna disappear after a year or two like so many other Mozilla side projects?
Most likely. The iOS guys that work on Mozilla apps are pretty tech savvy and use latest Apple technology.
Re: Firefox Lockbox
#24From the link, it claims that this "gives access to all the logins you've saved in Firefox", but I thought it was common knowledge that in-browser password storage is insecure? [0,1] If so, then this doesn't really promote much confidence in a product that appears to be a password manager. If they've addressed this issue, then that should probably be explicitly stated, although I understand the difficulties of that f…
> in-browser password storage is insecure
> (If you don't use a master password, which isn't required, I believe?)
When using a cloud-synced password vault that lands on the servers of a third party (this includes Firefox, Google, 1Password, Lastpass, etc.) you must always assume that the file itself is compromised; the only thing between an attacker and your passwords is the encryption by your master key.
I seriously doubt that Firefox Lockbox will allow you to cloud-sync your password file without setting a master password. *
Note: One of the first things malware authors typically go for is the password vault stored in browsers, but this is only because it is commonly used without any master key set.
* It might depend on some key derived from your account password, if you haven't observed the requirement of a master key. Not sure.
Re: Firefox Lockbox
#25Earlier quoted context omitted.
The video shows the password being copied (to a clipboard), so I'm guessing it doesn't do autofill. Does iOS support autofill apps?
lastpass on ios autofills if you select it from the safari, uh, box-with-up-arrow icon from the navigation bar
Op said in apps.
Re: Firefox Lockbox
#26[deleted]
Re: Firefox Lockbox
#27Does this have any advantages over an out-of-band system like KeePass/2/X/CX?
Sync, integration, simpler UI, portability and better ergonomics.
I use both lastpass and keepass, but keepass is really disliked by the non geeks around me.
Re: Firefox Lockbox
#28I was under the impression that the password manager for Firefox had some security issues.
Yes, that's why it's not using it. It's only importing from it.
Firefox password manager is also getting a revamping, which probably is a sister project to this one.
Re: Firefox Lockbox
#29If I'm already using Firefox on Mac, Windows & iPhone, what advantage does this bring over just opening the Firefox app on my iPhone and looking in Settings > Saved logins? Seems to me to be exactly the same, am I missing anything?
Ease of use:
1. Don't have to open a browser and slog you way through a settings menu.
2. Native app for iPhone and Android will allow you to auto fill these passwords in apps.
3. Easier management of passwords because you now have a UI with the sole purpose of managing passwords.
Also, this doesn't lock you into using Firefox, you can switch to whatever browser you want and still use this for managing passwords.
If they release an Android version and improve the browser UX this could be a good alternative to 1Password or LastPass.
Re: Firefox Lockbox
#30If I'm already using Firefox on Mac, Windows & iPhone, what advantage does this bring over just opening the Firefox app on my iPhone and looking in Settings > Saved logins? Seems to me to be exactly the same, am I missing anything?
It's faster. It syncs. It's safer than firefox passwords manager. It unlocks integrates better with the OS (unlock with fingerprints or face). You can use it for something else than websites.
However, it's still nowhere as convenient as lastpass.
But it's a good first step. I wish them luck.