How secure are saved passwords ?

[pete of ebor]

Just a general query. I know I can look at saved my passwords - in fact this has saved me a load of hassle recently.. but are these passwords encryped in any way within TB ? If for example a third party were able to get hold of a copy of the profile file, would they be able to easily extrct all my email passwords ?

[kerft]

If you have no master password set, anyone with access to your computer can get your passwords. If you have a master password, they are encrypted and reasonably safe. Unless the issue in this article has been fixed, someone knowledgeable could hack them if they have a powerful graphics card. https://palant.de/2018/03/10/master-pas ... ot-bother/ Note that your locally saved emails are not encrypted in any way, so anyone with access to your computer can get them.

[tanstaafl]

The passwords are not stored encrypted unless you set a master password. However, there seem to be plenty of articles/programs to crack Firefox and Thunderbird master passwords. See https://lifehacker.com/how-to-recover-y ... rd-5350375 for example.

See http://kb.mozillazine.org/Protecting_th ... ile_-_mail for some stronger alternatives.