but I am still being harassed by firefox “Network Password” pop=ups (I use XP and don’t comprehend computereze )

So far my only solution is to abandon Firefox and revert to Internet Explorer-

CAN we can do better than that –

HELP

can also be done by inserting passwoed without the type (with so haker be difficult to identify what data it in writing) .. and can also be done by modifying the words used as a password ..

http://gnomeuser:gorundpass@mem.site.tld

yes, thank you, firefox I know I’m logging in with a password, and yes it’s correct. arg

I think the idea to simplify and promote the use of the master password would be a step in the right direction, but what about flat out requiring it?

Perhaps that would help protect against tools like FirePassword which is advertised as “The Firefox Username & Password List Decryptor”

I had a look at your blog – lots of exciting changes in the works, especially the porting from C to JS. Very cool.

Cheers,
Tara

The Firefox password manager uses 3DES to encrypt the passwords, and if you’re using a master password you’re secure. [Someone could steal your profile and try to brute force your master password, but if they can do that they can probably just install a keystroke sniffer or various other malware anyway.]

Firefox doesn’t require you to set a master password by default, which does mean that anyone with access to your browser’s configuration could access your passwords.