Firefox has a built-in password manager that most people overlook in favor of third-party apps. For some workflows, it's actually quite good. Here's an honest look at what it does well and where it falls short.
What Firefox Password Manager Does
- Saves and autofills usernames and passwords on websites
- Generates strong random passwords when creating new accounts
- Warns you when a saved password appears in known data breaches
- Syncs across devices via Firefox Sync (end-to-end encrypted)
- Exports passwords to CSV
- Works on Firefox desktop and Firefox for Android
How to Use It
Saving a password: When you log into a site, Firefox shows a banner asking to save the password. Click "Save."
Viewing saved passwords: Settings → Privacy & Security → Passwords → Saved Passwords. Or type about:logins in the address bar.
Generating a password: When you click into a new password field, Firefox offers a generated password. It shows strength (using letters, numbers, and symbols by default).
Searching saved passwords: In about:logins, the search bar filters by site or username.
TouchID and Device Unlock
On macOS with TouchID, Firefox can require a TouchID scan before showing saved passwords. Enable in Settings → Privacy & Security → Passwords → "Use Touch ID to autofill passwords."
On Windows with Hello, similar integration is available (requires Windows 11 or Windows 10 with Windows Hello support).
This is meaningful security — someone who sits at your unlocked computer can't just read your passwords without biometric verification.
Primary Password
Without a Primary Password set, Firefox passwords are stored in a local file that's readable by any process running as your user (since Firefox decrypts them in memory to autofill).
Setting a Primary Password: Settings → Privacy & Security → Passwords → "Use a Primary Password."
Once set, Firefox asks for this master password once per session. Passwords are encrypted at rest with this password. Without it, the password file is unreadable even if someone copies your Firefox profile.
This is equivalent to what Bitwarden/1Password/etc. call a "master password."
Firefox Monitor (Breach Alerts)
Firefox integrates with Mozilla Monitor (previously Firefox Monitor) to check your saved email addresses against known data breaches.
about:logins shows alerts if any of your saved site credentials have appeared in a known breach. Clicking an alert explains which breach and what data was exposed.
Firefox vs Bitwarden: When to Use Each
Use Firefox's built-in manager if:
- You primarily use Firefox and don't need cross-browser password access
- You want zero extra software
- You trust Mozilla's sync security model
- You use Firefox on both desktop and Android (sync works well)
Use Bitwarden if:
- You need passwords in Chrome, Safari, and Firefox
- You want more detailed password auditing (password health reports)
- You want to share passwords with other people (families, teams)
- You need emergency access (designate someone to access your vault if needed)
- You want iOS app integration
Use 1Password, Dashlane, etc. if:
- You want polished cross-platform UX and are willing to pay
- You need travel mode, TOTP built-in, advanced sharing
Data Portability
Export from Firefox: about:logins → three-dot menu → "Export Passwords" → CSV format.
The CSV includes: website, username, password, and the creation/modification date. This format is compatible with most password managers for import.
Import to Firefox: about:logins → three-dot menu → "Import from a File" → CSV. Useful when migrating from another password manager.
What Firefox Password Manager Can't Do
- TOTP (two-factor codes): No built-in TOTP support. You need a separate authenticator app or a password manager with built-in TOTP (Bitwarden, 1Password, etc.)
- Passkey support: Firefox 122+ has passkey support for sites that implement it — but the built-in password manager's passkey integration is limited compared to dedicated credential managers
- Secure notes: No free-form note storage for non-password sensitive data
- Desktop app integration: No auto-fill in desktop apps, only browser
For Firefox-only users who want simple, free, privacy-respecting password management: the built-in option is solid. For anything more complex — cross-browser, TOTP, sharing, or desktop apps — Bitwarden is the natural step up (free tier is generous).
Top comments (0)