Open Bug 942839 Opened 11 years ago Updated 16 days ago

Device pairing should ask for master password if defined, even when password store is already unlocked

Categories

(Toolkit :: Password Manager, defect)

Product:
Toolkit
Component:
Password Manager
Version:
27 Branch
Type:
defect

Tracking

()

Status:
UNCONFIRMED

People

(Reporter: manuel.faux, Unassigned)

Details

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:25.0) Gecko/20100101 Firefox/25.0 (Beta/Release)
Build ID: 20131030131730

Steps to reproduce:

- Configure Firefox Sync and set a master password for your password store.
- Unlock the password store by e.g. browse to a website which requires your credentials stored in the password store. Unlock the password store by entering the master password.
- In the Firefox preferences choose Sync and click "Pair a Device".


Actual results:

The "Pair a Device" form prompts for the pairing string, to pair a Firefox device. If entered a correct string, the device is paired immediately and all information including stored passwords are synced to the new device.


Expected results:

The master password should be requested before pairing the device, even when the password store was already unlocked, similar to the "Show Saved Passwords" feature.
Summary: Device pairing should ask for master password if defined → Device pairing should ask for master password if defined, even when password store is already unlocked
Component: Untriaged → Security
OS: Linux → All
Hardware: x86_64 → All
Severity: normal → S3
Severity: S3 → --
Component: Security → Password Manager
Product: Firefox → Toolkit
You need to log in before you can comment on or make changes to this bug.