Firefox's built-in password manager (Firefox Lockwise, accessible at about:logins) is more capable than most users realize. Here's what it can do, what its limitations are, and how it compares to dedicated password managers.
What Firefox's Password Manager Can Do
Store credentials: Saves username/password for any site you log in to.
Auto-fill: Detects login forms and offers to fill saved credentials.
Password generation: When you create a new account, Firefox can suggest a strong random password.
Breach detection: If saved passwords appear in known data breaches, Firefox warns you (uses Firefox Monitor, powered by Have I Been Pwned data).
Sync: Passwords sync via Firefox Sync (E2E encrypted — Mozilla can't read them).
Export: about:logins → Export Logins (CSV) — useful for migrating to a dedicated password manager.
Import: about:logins → Import from a File (CSV from Chrome, other Firefox profiles, etc.).
about:logins Interface
Navigate to about:logins in the address bar:
- Search box: filter by site name or username
- Sort by: Last Used, Last Changed, Name
- View/edit any entry
- Remove entries (right-click → delete)
- Copy username/password to clipboard
- Add entries manually
Three-dot menu (⋮):
- Import from file (CSV)
- Export logins
- Remove all logins
- Open Firefox Lockwise Preferences
Password Generator
When you click a password field for a new account:
- Firefox shows a key icon
- Click "Use a Securely Generated Password"
- A strong random password is created and saved automatically
Generate manually: Right-click any password field → Generate Strong Password.
Firefox's generated passwords: Use a combination of letters, numbers, and symbols. The entropy is good (not just dictionary words).
Firefox Monitor Integration
Firefox Monitor (monitor.firefox.com) checks if your email appears in known data breaches.
In Firefox Lockwise: If a saved password was exposed in a known breach, Firefox marks that login with a warning:
- Click the warning → See which breach exposed it
- Option to change password
Enable breach alerts: Settings → Privacy & Security → Security → Firefox will notify you when passwords have been compromised.
Autofill Settings
Offer to save passwords: Settings → Privacy → Logins & Passwords → Ask to save logins
Autofill: Settings → Privacy → Logins & Passwords → Autofill logins and passwords
Exception list: Settings → Privacy → Logins & Passwords → Saved Logins → Exceptions
Add sites you don't want Firefox to save passwords for (banking sites you prefer to type manually).
Primary Password
Firefox stores passwords encrypted. Without a Primary Password, anyone who opens your Firefox can see all saved passwords.
Enable Primary Password:
Settings → Privacy & Security → Logins & Passwords → Use a Primary Password → Set.
Without a Primary Password, Firefox prompts once when you first unlock passwords in a session. With one, it prompts every time you access a password in a new session.
Primary Password protects against: People with physical access to your computer. It doesn't protect against malware that runs as your user account.
Limitations vs Dedicated Password Managers
What Firefox passwords lack vs Bitwarden/1Password/etc.:
No secure notes: Can't store notes, PINs, credit cards, identities — only username/password pairs.
No browser extension for other browsers: Your passwords are in Firefox. Chrome or Safari can't access them (unless you export/import).
No iOS/Android app (Lockwise app was discontinued): Access on mobile is via Firefox browser only.
Limited organization: No folders, tags, or categories. Just search.
No two-factor codes (TOTP): Can't store and fill 2FA codes like 1Password or Bitwarden.
No sharing: Can't share passwords with family/team members.
No emergency access: No way to grant access to someone in case of emergency.
Limited browser support: Only works natively in Firefox (though Bitwarden supports all browsers simultaneously).
When Firefox Passwords Are Enough
For many users, Firefox's built-in manager is adequate:
- Single-browser household: You use Firefox everywhere (desktop, Android, iOS)
- Privacy-first: You don't want a third-party service
- Low credential complexity: No teams, no notes, no TOTP codes needed
- Simple needs: Websites and apps with username/password
Migrating to a Dedicated Password Manager
If you want to move from Firefox to Bitwarden:
- Export from Firefox: about:logins → ⋮ → Export Logins → save CSV
- Import to Bitwarden: Bitwarden web vault → Tools → Import Data → Firefox (CSV)
- Install Bitwarden extension in Firefox: AMO → Bitwarden
- Clear Firefox's stored passwords: about:logins → ⋮ → Remove All Logins
Bitwarden is the recommended upgrade path because:
- Free tier is comprehensive
- Open source (self-hostable)
- Works on all browsers and devices
- Has notes, cards, identities, TOTP
- E2E encryption
Firefox Password Security
How passwords are stored:
- Encrypted with
key4.db(the master key) - Encrypted data stored in
logins.json - Both files are in your profile folder
Without Primary Password: The key4.db encryption key is weak (derived from a fixed value). The files are not plaintext, but an attacker with your files and some effort could decrypt them.
With Primary Password: The key4.db is encrypted with a key derived from your Primary Password. Significantly harder to crack.
Firefox Sync encryption: Synced passwords are E2E encrypted — different key from Primary Password, derived from your FxA password. Mozilla stores encrypted blobs.
Common Issues
Password not saving: Check if the site is in the exception list. Or: Firefox sometimes doesn't detect forms behind SPA navigation. Check: about:logins → does the entry appear?
Password not filling: The site's login form may have non-standard HTML. Check: is the form a standard <input type="password">? Or: if a site uses an overlay/popup for login.
Popup appears but has the wrong password: Multiple accounts for the same site? Firefox saves multiple credentials per site. The popup shows the most recently used. Click "Select a different account."
Firefox filled the wrong field: Some sites have hidden password fields for accessibility. Firefox may fill those. Report to the site as a bug.
Top comments (0)