mozilla-lockwise / lockwise-android

Firefox's Lockwise app for Android
https://mozilla-lockwise.github.io/lockwise-android/
Mozilla Public License 2.0
623 stars 104 forks source link

Password Access Without Unlocking Lockwise through Firefox #1202

Open creativeArtie opened 4 years ago

creativeArtie commented 4 years ago

Steps to reproduce

Open the Firefox Browser app, and turn off master password. Then go to Firefox Browser Settings > Privacy > Manage Login.

Expected behavior

If Lockwise is install, it should ask to be unlocked before allow a person to see login data.

Actual behavior

Opens about:login without any security check and therefore allowing the user to access login data that is protected by Lockwise.

Device & build information

A workaround is using a master password, but the Lockwise does not autofill the password field to open the about:logins.