Firefox Accounts (Firefox Accounts → now "Mozilla accounts") is Mozilla's identity service powering Firefox Sync, Mozilla VPN, and other Mozilla services. Here's what it does and how to use it effectively.
What Mozilla Accounts Is
Mozilla accounts (formerly Firefox Accounts, "FxA") is:
- A user identity system hosted by Mozilla
- Used for Firefox Sync (bookmarks, passwords, history, open tabs)
- Used for Mozilla VPN subscription
- Used for Firefox Relay (email masking service)
An account is required for:
- Syncing Firefox data across devices
- Using Mozilla VPN
- Firefox Relay (email alias service)
An account is NOT required for:
- Using Firefox itself
- Installing extensions from AMO
- Browsing the web
- Any privacy features (ETP, Total Cookie Protection, DoH, ECH)
Creating a Mozilla Account
Navigate to accounts.firefox.com or:
Settings → Sync → Sign in
Requires an email address. No phone number required. You can use a privacy-focused email or a temporary address if you want minimal connection to your real identity.
Recovery key: After account creation, generate a recovery key:
Settings → Sync → Manage Account → Recovery Key
Save this key securely. If you lose your password and don't have the recovery key, your sync data is unrecoverable (it's encrypted with a key derived from your password).
What Firefox Sync Encrypts
All synced data is end-to-end encrypted before it leaves your device:
- Bookmarks
- History
- Saved passwords
- Open tabs
- Extensions list
- Some preferences
Mozilla cannot read your synced data. Even if they wanted to comply with a government request for your sync data, they couldn't — they only have encrypted blobs.
The encryption uses:
- Your password → PBKDF2 (100,000 iterations) → Sync Key
- Sync Key → AES-256 encryption of all sync data
Important implication: If you forget your password and don't have the recovery key, your data is lost forever — the encryption is real.
Multi-Device Sync
Sync works between:
- Firefox on desktop (Windows, macOS, Linux)
- Firefox for Android
- Firefox for iOS (though some limitations due to Apple's WebKit requirement)
Sign in on each device with the same account. Data syncs automatically.
Selective sync: Settings → Sync → Choose what to sync. Enable/disable each category independently.
Conflict resolution: If you have bookmarks or passwords that conflict (modified on different devices before sync), Firefox uses a "last modified wins" approach.
Firefox Relay
Firefox Relay is an email masking service included with Mozilla accounts (basic tier free):
Creates email aliases (like abc123@mozmail.com) that forward to your real address. Sites get the alias, not your real email. If a site starts sending spam, you delete the alias.
Free tier: 5 email masks
Premium tier: Unlimited masks + a custom email domain
Access via: relay.firefox.com or the Firefox Relay extension on AMO.
Useful for:
- Signing up for newsletters without your real email
- Accounts where you don't trust the service with your real address
- Reducing spam from data breaches (breached alias → delete it)
Mozilla VPN
Mozilla accounts includes access to Mozilla VPN (paid, ~$5/month):
- Uses Mullvad's server infrastructure
- WireGuard protocol
- Audited no-logs policy
- Available for Windows, macOS, Linux, Android, iOS
The combination of Firefox + Mozilla VPN covers both browser-level (ETP, DoH) and network-level (IP address, VPN DNS) privacy in an integrated Mozilla ecosystem.
About:accounts — Account Settings in Firefox
Navigate to about:accounts to:
- Sign in / sign out
- See sync status
- Manage which devices are connected
- Disconnect specific devices
Or: Settings → Sync for all sync-related settings.
Security Settings
Two-step authentication: accounts.firefox.com → Security → Two-step authentication.
Supports:
- TOTP (Authenticator app — Google Authenticator, Bitwarden, 1Password)
- Backup codes
Active sessions: accounts.firefox.com → Settings → Security → Recent activity.
See all signed-in devices. Revoke any you don't recognize.
Connected services: See which Mozilla services are using your account (Firefox Sync, Relay, VPN, AMO developer hub).
Self-Hosting Sync (Syncstorage-rs)
For users who want to self-host their sync server:
# docker-compose.yml
services:
syncserver:
image: mozilla/syncstorage-rs
environment:
- SYNC_HOST=0.0.0.0
- SYNC_PORT=8000
- SYNC_DATABASE_URL=mysql://user:password@db/syncdb
ports:
- "8000:8000"
Configure Firefox to use your server:
about:config → identity.sync.tokenserver.uri → https://your-server.com/token/1.0/sync/1.5
Note: You still need a Mozilla account for authentication — you can't fully replace the identity service easily, only the storage backend.
Privacy Considerations
What Mozilla sees:
- Your email address
- Which IP address syncs
- When sync activity occurs (timing metadata)
- Your subscription status (for VPN/Relay)
What Mozilla doesn't see:
- Your bookmarks, passwords, history (encrypted)
- Your browsing behavior (ETP/DoH work locally)
For maximum anonymity: You can use a pseudonymous email address for your Mozilla account. Use Firefox Relay to create an alias → use that alias for your Mozilla account. This creates a layer of indirection from your real email.
Mozilla Account vs Competitor Accounts
| Mozilla Account | Google Account (Chrome Sync) | |
|---|---|---|
| Sync encryption | End-to-end | Google has keys |
| Required for basic use | No | No |
| Data portability | Export bookmarks/passwords | Google Takeout |
| Additional services | VPN, Relay | GMail, Drive, Meet, ... |
| Business model | Subscription + donation | Advertising |
The fundamental difference is encryption: Mozilla's architecture means they can't read your sync data. Google's sync is encrypted in transit but Google holds the keys.
Top comments (0)