Protect Firefox Passwords & Still Fill Forms?

Today I discovered a previously unknown password facility within Firefox 2 that is simply brilliant.

While discussing password security and allowing Firefox to save username and password combinations so you dont have to with a colleague the other day I became aware that if my laptop got stolen… there was a hell of a lot of stuff people could access as Firefox held the login details.

I was about to delete all passwords from the system to ensure security I chanced upon the ‘Master Password’ button in the ‘Security’ tab in the options menu. Once set I assumed it would just protect the passwords stored which, while a step in the right direction, would still allow people to click my bookmarks and bypass the login screens as Firefox retained the login details.

I was wrong, it is in fact very clever. When a master password is set Firefox does indeed protect the saved passwords from being shown in the options menu but it also provides a pop-up box requiring the master password when you click on a site that has saved login details. So for example if I click on Facebook with the master password enabled, Firefox asks me for the master password before loading the page. Once entered Firefox then pre-fills the login details for me to click ‘login’. If I get the master password wrong or click cancel, the page still loads but the login form is empty!

The form only needs to be filled in once per session then all form fields are filled from then on.