Master password should expire after some minutes of inactivity

[Joan Tur]

Binary package hint: firefox-3.0

I'm using master password to store form data, but I also use to leave firefox running all the time, and I never shut the laptop off, but suspend it to ram.

This means I never have to key my master password in, as firefox is already running, and the master password was asked for only once in the past.

Would it be possible to set firefox to apply for the master password after X minutes of inactivity, like kwalletmanager does, for instance?

Thanks.

-----
Data aplied:

quini@quinibq:~$ lsb_release -rd
Description: Ubuntu 9.04
Release: 9.04

quini@quinibq:~$ apt-cache policy firefox
firefox:
  Instal·lat: 3.0.12+build1+nobinonly-0ubuntu0.9.04.1
  Candidat: 3.0.12+build1+nobinonly-0ubuntu0.9.04.1
  Taula de versió:
 *** 3.0.12+build1+nobinonly-0ubuntu0.9.04.1 0
        500 http://es.archive.ubuntu.com jaunty-updates/main Packages
        500 http://security.ubuntu.com jaunty-security/main Packages
        100 /var/lib/dpkg/status
     3.0.8+nobinonly-0ubuntu3 0
        500 http://es.archive.ubuntu.com jaunty/main Packages

ProblemType: Bug
Architecture: i386
DistroRelease: Ubuntu 9.04
Package: firefox-3.0 3.0.12+build1+nobinonly-0ubuntu0.9.04.1
ProcEnviron:
 LANG=ca_ES.UTF-8
 SHELL=/bin/bash
SourcePackage: firefox-3.0
Uname: Linux 2.6.28-14-generic i686

[Steffen Wilberg (steffen-wilberg)]

This isn't supported yet. -> enhancement; all/all;
-> password manager, reassigning and confirming.
-> blocks bug 218694.

[Jruderman (jruderman)]

*** Bug 261192 has been marked as a duplicate of this bug. ***

[Gavin Sharp (gavin-sharp)]

*** Bug 268298 has been marked as a duplicate of this bug. ***

[Joshbirnbaum-mozil (joshbirnbaum-mozil)]

*** Bug 304929 has been marked as a duplicate of this bug. ***

[Davidpjames (davidpjames)]

Mass edit: Changing QA to default QA Contact

[Philringnalda (philringnalda)]

*** Bug 343043 has been marked as a duplicate of this bug. ***

[Fry-kun (fry-kun)]

wasn't this supported in earlier versions of Fx?

[Philringnalda (philringnalda)]

Don't think so: the prefs security.password_lifetime and security.ask_for_password are just used to set the values in the pref-masterpass window, and its handling script actually sets them internally in nsPK11TokenDB, so if you don't go through a working pref window that lets you call something like http://landfill.mozilla.org/mxr-test/seamonkey/source/security/manager/pki/resources/content/pref-masterpass.js#73 then you haven't actually set anything.

[Philringnalda (philringnalda)]

*** Bug 326755 has been marked as a duplicate of this bug. ***

[Joan Tur (joantur)]

Binary package hint: firefox-3.0

I'm using master password to store form data, but I also use to leave firefox running all the time, and I never shut the laptop off, but suspend it to ram.

This means I never have to key my master password in, as firefox is already running, and the master password was asked for only once in the past.

Would it be possible to set firefox to apply for the master password after X minutes of inactivity, like kwalletmanager does, for instance?

Thanks.

-----
Data aplied:

quini@quinibq:~$ lsb_release -rd
Description: Ubuntu 9.04
Release: 9.04

quini@quinibq:~$ apt-cache policy firefox
firefox:
  Instal·lat: 3.0.12+build1+nobinonly-0ubuntu0.9.04.1
  Candidat: 3.0.12+build1+nobinonly-0ubuntu0.9.04.1
  Taula de versió:
 *** 3.0.12+build1+nobinonly-0ubuntu0.9.04.1 0
        500 http://es.archive.ubuntu.com jaunty-updates/main Packages
        500 http://security.ubuntu.com jaunty-security/main Packages
        100 /var/lib/dpkg/status
     3.0.8+nobinonly-0ubuntu3 0
        500 http://es.archive.ubuntu.com jaunty/main Packages

ProblemType: Bug
Architecture: i386
DistroRelease: Ubuntu 9.04
Package: firefox-3.0 3.0.12+build1+nobinonly-0ubuntu0.9.04.1
ProcEnviron:
 LANG=ca_ES.UTF-8
 SHELL=/bin/bash
SourcePackage: firefox-3.0
Uname: Linux 2.6.28-14-generic i686

[Mozilla-bugs-micahscomputing (mozilla-bugs-micahscomputing)]

We just had a user request this.
Ubuntu Bug:
https://bugs.launchpad.net/bugs/407615

Also, possible duplicate: Mozilla Bug 155739

There appears to be an addon as well for this:
https://addons.mozilla.org/en-US/firefox/addon/1275

But it seems reasonable to have this in the UI.

[Micah Gersten (micahg)]

Thank you for your bug report. This bug has been reported to the developers of the software. You can track it and make comments at:
https://bugzilla.mozilla.org/show_bug.cgi?id=222408

There's also an addon for this until it's supported in the UI:
https://addons.mozilla.org/en-US/firefox/addon/1275

[P (p92)]

there is an addon "master password timeout" that does exactly what you want.

[Eugene (eyv)]

The add-on Micah mentions does not work.

[Eugene (eyv)]

The addon does not do anything. It's been broken for some time now.

[Joan Tur (joantur)]

I've recetly installed the "master password timeout", v. 0.3.1, and it seems to work as expected.

But speaking about passwords management, I really would prefer this option to be controlled directly by Firefox, instead of using someone's (unknown) addon...

[Micah Gersten (micahg)]

@Joan Tur

That's what this bug report and the upstream bug report are for.

[Ezh (ezh)]

Is this the right bug for master password reentering prompt after some inactivity period?

[Allison-aa (allison-aa)]

I have the same question. Suspect that 3.6.10 has incorporated "require password on return from sleep/hibernate. That's a good thing a good thing for laptop users (in case the computer gets stolen while asleep, but a pain in the neck for desktop users who live with their systems -- likelihood is that this will prove enough of a nusiance to turn off the master password). Make "forget password on sleep/hibernate" an option?

[Vseerror (vseerror)]

*** Bug 503831 has been marked as a duplicate of this bug. ***

[Dolske (dolske)]

It's generally agreed among UX/Engineering/Product that we don't want to further develop the existing master password functionality, as it's a poor fit for current needs and our current direction in this area.

[Dolske (dolske)]

*** Bug 383229 has been marked as a duplicate of this bug. ***

[Fry-kun (fry-kun)]

@Justin: are you implying that "master password" will be phased out or will be left alone in foreseeable future?