Master password for browser

asked 2015-08-13 13:35:42 +0200

Mced gravatar image

Sailfish browser gives an option to save login passwords, but there's no master password to protect them. That is a feature present in many desktop browsers (Firefox, Opera...), so I think it's mandatory in a mobile device.

What if our device is stolen? Just by checking bookmarks or urlbar history, thieves can automatically log into our accounts. I can't see any sense in saving passwords if they are not protected.

edit retag flag offensive close delete

Comments

I think, since the sailfish-browser is based on Mozilla Firefox and also uses its password storage system, it should not be a big deal to implement the master password functionality. Correct me if I'm wrong.

Anyway, you can activate the device lock on your jolla, so it is at least much harder to steal logins. I don't know if it is completely impossible on a locked jolla.

wanderer ( 2015-08-13 14:02:30 +0200 )edit

Yes, device locking is an option. But many people, including me, don't want to keep all day unlocking their devices for everything, related or not to browsing password protected sites.

Mced ( 2015-08-13 14:52:19 +0200 )edit

I totally agree that this should be provided ASAP.

On your behalf, go and try mazelock from openrepos, it's really giving me a speed bump when unlocking my device.

MoritzJT ( 2015-08-13 21:59:56 +0200 )edit

@MoritzJT Thanks for the tip, but I'm going to walk another way:

--No bookmarking (those sites, I mean).

--Make an hourly cron script which erases all history entries related to those sites. Since sqlite3 is available on Sailfish, it shouldn't be hard to do. Stock brower history file is here (not an obvious place, by the way):

~/.local/share/org.sailfishos/sailfish-browser/sailfish-browser.sqlite

But this technique doesn't work with popular sites. If any criminal owns your phone, he's surely going to try Gmail, Facebook and others, even if they're not present in your bookmarks or history.

Mced ( 2015-08-14 12:22:55 +0200 )edit