Toolkit:Password Manager

The Toolkit password manager is responsible for remembering usernames and passwords (aka. logins) on sites and allowing the user to autofill or autocomplete it upon returning to the website.

• Bug tracking:
  • Components:
    • Firefox::about:logins (File a bug) for about:logins
    • Toolkit::Password Manager (File a bug)
    • Toolkit::Password Manager: Site Compatibility (File a bug)
  • Current Backlog | P1/P2 bugs | Telemetry probes | meta bugs | Unassigned Mentored Bugs
• Preferences: signon.*
• Code:
  • browser/components/aboutlogins/ for about:logins
  • toolkit/components/passwordmgr/
• Mailing List: passwords-dev
• IRC Channel: #passwords
• 2019H1 Feature documentation for QA

Priority Bugs

(Not including about:logins bugs)

P1

Full Query

ID	Summary	Priority	Keywords	Whiteboard	Assigned to
1200472	Broaden search criteria for password fill suggestions shown in the context menu affordance "Fill Password" to include subdomains.	P1		[passwords:cross-origin] [passwords:fill-ui]	Matthew N. [:MattN] (PM me if requests are blocking you)
1596660	Create a GeckoView nsILoginManagerStorage backend	P1		[passwords:storage]	Matthew N. [:MattN] (PM me if requests are blocking you)
1596663	Switch to async login search APIs to support GeckoView storage queries	P1		[passwords:storage]	Matthew N. [:MattN] (PM me if requests are blocking you)
1337606	Intermittent toolkit/components/passwordmgr/test/browser/browser_DOMInputPasswordAdded.js | Test timed out -	P1	intermittent-failure, leave-open	[stockwell disabled]
1554959	Intermittent toolkit/components/passwordmgr/test/mochitest/test_autocomplete_https_upgrade.html | Test timed out.	P1	intermittent-failure, leave-open, regression	[stockwell disabled][stockwell needswork:owner]
1576490	Also fill the password confirmation field following the active field when filling a generated password	P1
1566536	Support password generation in private windows	P1		[passwords:generation]
1536728	Show a dismissed login capture doorhanger when a user edits a password field (before submission)	P1	parity-chrome, uiwanted

8 Total; 8 Open (100%); 0 Resolved (0%); 0 Verified (0%);

P2

Full Query

ID	Summary	Priority	Keywords	Whiteboard	Assigned to
551948	"Select which login to update:" UI appears when doing a password change with multiple diff. saved logins and no editable username field	P2		[passwords:heuristics]
558178	Only show password capture dialog if we're reasonably sure the password was correct and the login was successful	P2		[passwords:capture-UI] [blocked]
973759	Master password should be protected with stronger cryptography	P2	sec-want	[passwords:master-password]
1119067	Use a field with the "username" autocomplete field name to short-circuit username field detection	P2		[passwords:heuristics]
1119083	Breakdown: Support capturing and filling of login credentials on hulu.com	P2		[platform-rel-Hulu]
1122762	Collect domains where we get a strong signal that the password manager is failing the user	P2		[passwords:telemetry]
1167872	Error: TypeError: this._recipeManager is null Source file: resource://gre/modules/LoginManagerParent.jsm Line: 118/185	P2	regression	[passwords:recipes]
1194353	Context menu in autocomplete=username field without password field present should show "Fill Username" menu.	P2		[passwords:fill-ui]
1223185	Discuss a replacement for master password	P2		[passwords:master-password]
1407146	Migrate login manager storage to Punycode and only use Unicode for UI-facing parts	P2		[passwords:tech-debt]
1425879	Intermittent toolkit/components/passwordmgr/test/browser/browser_autocomplete_insecure_warning.js | Uncaught exception - Wait for warning to show - timed out after 50 tries.	P2	intermittent-failure, leave-open	[stockwell disabled]
1427543	Consider making signon.autofillForms = false to be the default	P2	parity-safari
1449867	proxy authentication username and password even if do not prompt selected	P2
1513003	PasswordManager:findLogins MessageManager Topic allows querying for any origin's login	P2		security:passwords
1523922	LoginManagerContent.jsm shows up in the page load profiles, consider rewriting in C++?	P2		[qf:p2:pageload][fxperf:p3]
1524490	Add affordance for a user to manually save login credentials from the context menu	P2	feature	[passwords:capture-UI]
1531164	autocomplete=username field should get username autocompletions when there is no password field	P2		[passwords:fill-ui]
1532377	Avoid saving a munged password in login storage	P2		[passwords:capture-UI]
1536269	Handle masked pre-filled username values when attempting to autofill login forms	P2
1548854	Dedupe autocomplete rows offering a generated password and the auto-saved login row	P2
1555209	Use data from the autocomplete result in the parent to fill the correct password in content	P2		[passwords:tech-debt] [passwords:fill-ui]
1561647	"View Saved Logins" at the end of the scroll-list when more than 5 logins saved	P2
1569253	Remove old password manager UI (passwordManager.xul) from mozilla-central	P2		[passwords:management]
1569848	Show indicators on saved logins that are re-using those breached passwords	P2
1574907	Saved entry does not display password at field level when it's being set from multiple entries	P2	regression, regressionwindow-wanted
1582116	test_prompt_async.html fails with fission enabled	P2
1582117	test_prompt_http.html fails with fission enabled	P2
1582499	Deal with InsecurePasswordUtils.isFormSecure() for fission	P2
1584185	Password auto-filled with the wrong password (generated password)	P2		[passwords:generation] [skyline]
1588091	test_autocomplete_https_downgrade.html fails with fission enabled	P2
1592920	test_autofill_from_bfcache.html fails with fission enabled	P2
1595244	Use login field labels/id/name to determine new-password field types	P2		[passwords:heuristics] [passwords:generation]
1388674	Only prompt to save logins if a login field was modified by the user	P2		[passwords:heuristics]	Sam Foster [:sfoster] (he/him)
1583150	Update doorhanger might be displayed 2 times due to site fast reload/redirect and instant auto-fill	P2			Sam Foster [:sfoster] (he/him)

34 Total; 34 Open (100%); 0 Resolved (0%); 0 Verified (0%);

Site Compatibility

Full Query

ID	Summary	Priority	Keywords	Whiteboard	Assigned to
1289947	Logins not saved on www.icloud.com	P2
1546749	Dojo Dijit's ValidationTextBox's dijitValidationIcon causes "X " to be saved as the username on login forms	P2		[passwords:heuristics]
1562028	Firefox won't remember a password update on https://appleid.apple.com	P2
1575361	Not offering to save passwords on virustotal.com (with Shadow DOM)	P2

4 Total; 4 Open (100%); 0 Resolved (0%); 0 Verified (0%);

Architecture

Rough intro document

See Also

• Toolkit:Password Manager/2015
• Toolkit:Password Manager/2015/Master Password
• Toolkit:Password Manager/Debugging
• Toolkit:Password Manager/Extensions
• Toolkit:Password Manager/Feature Backlog
• Toolkit:Password Manager/Keychain Integration
• Toolkit:Password Manager/Password Generation
• Toolkit:Password Manager/about:logins

Firefox:Password_Manager:UI