Thursday, December 11, 2008

Powerful Firefox Password Managers

Password Manager

Password manager is a software that securely stores the passwords and respective accounts on the user's computer for handy reference. The software typically has a local database or files that holds the encrypted password data. Many password managers also work as a form filler, thus they fill the user and password data automatically into forms. These are usually implemented as a browser extension.

1. Master Password Timeout
Firefox's internal password manager, asks for the master password only one time for the whole session and it never times out. Using Master Password Timeout add-on, you can specify the inactivity time-out in seconds as shown below. In my opinion, this should be a Firefox built-in feature.

2. SecurePassword Generator
SecurePassword Generator is an excellent password generator add-on with the following features.

  • Copy the random password to clipboard
  • Generate unique passwords that can be typed using both hands, left hand only or right hand only. For example, when you choose 'Left Hand Only', it will generate password only using the keys on the left side of the keyboard.
  • Specify the total number of characters.
  • Ability to choose alphabets (lower case, upper case or mixed case), numbers and special characters for the password.
  • You can also specify a list of characters to be excluded.
  • When you using alphabets, numbers and special characters, you can specify the weight as shown in the screen shot below.

3. Password Hasher
Creating and remembering unique passwords for every site where you have an account is a very hard. You can use either Firefox built-in password manager or some external password manager, that will remember the password for you and store it in an encrypted file or database. Lot of people who don't feel comfortable using a password manager, eventually end-up using the same password for all the websites.

Password Hasher add-on uses, Password hashing technique where using a master password and a unique parameter (such as website domain name), it will always give you a same strong password, which will be different for every website. So, all you need to remember is a master password. But, you still can give different strong passwords to all your online accounts without the hassle of remembering or storing all of them.

As shown below, for yahoo email website, using the master password as 'singlepassword', it created a strong password that is shown in 'Hash Word' field. You don't need to remember this strong password, which can be recreated anytime using the site tag and master password.

If a website has special password restriction, such as password length or at least one upper case etc., you can specify those password requirements also as shown below.

To launch password hasher, go to a website that displays username and password field, and do one of the following:

  1. Click on Firefox Tool menu → select Password Hasher.
  2. Press Control + F6 when either username or password field on the website is highlighted.
  3. This add-on will display a '#' symbol right below the password field on all the websites.
  4. Clicking on the '#' will launch the Password Hasher.


4. Password Maker
Similar to Password Hasher, Password Maker also uses Password hashing technique to generate unique strong password for every website using just one master password. Password Maker has lot of advanced options. Apart from username and password, you can also specify additional fields that needs to be filled automatically on a web page.

From the advance options → Accounts Tab → Select 'Settings' from the drop-down list, which will display Password Maker account-specific setting dialog → , click on Extended Tab → From here you can choose type of Hash Algorithm used by Password Maker. By default it uses MD5.

5. Secure Login
Login to a website just with a single click or a keystroke. If you are using the Firefox built-in password manager, Secure Login is a must have add-on. You can login to a website either by clicking on the key icon on the tool bar (similar to Opera's wand login) or simply by pressing Alt + N.

6. Unhide Passwords
If you are constantly making typos while entering the password, Unhide Passwords add-on may be helpful, where it will unhide the passwords in the password field. Instead of displaying ****'s in the password field, it will display the real password as you type, as shown below.

Personally, I don't use this add-on, as I don't want anybody looking over my shoulder to see the password and I don't make lot of typos. But, I can see this add-on being very helpful for those who make lot of typos.

7. Password Exporter
Using Password Exporter, the website login information stored in the Firefox in-built password manager, can be exported either to a XML file or CSV file. This may be required when you want to either move the login information from Firefox to another password manager or move the login information to a Firefox running on another computer.

Following fields will be exported:


  • Hostname
  • Username
  • Password
  • formSubmitURL
  • httpRealm
  • usernameField
  • passwordField

To launch the password exporter, click on Tools menu → Options → Security Tab → Import/Export Passwords

0 comments until now.