{ /*** [SECTION 0900]: PASSWORDS ***/ /* 0901: disable saving passwords * [NOTE] This does not clear any passwords already saved * [SETTING] Privacy & Security>Logins and Passwords>Ask to save logins and passwords for websites ***/ # // user_pref("signon.rememberSignons", false); /* 0902: use a primary password * There are no preferences for this. It is all handled internally. * [SETTING] Privacy & Security>Logins and Passwords>Use a Primary Password * [1] https://support.mozilla.org/kb/use-primary-password-protect-stored-logins-and-pas ***/ /* 0903: set how often Firefox should ask for the primary password * 0=the first time (default), 1=every time it's needed, 2=every n minutes (see 0904) ***/ "security.ask_for_password" = 2; /* 0904: set how often in minutes Firefox should ask for the primary password (see 0903) * in minutes, default is 30 ***/ "security.password_lifetime" = 5; /* 0905: disable auto-filling username & password form fields * can leak in cross-site forms *and* be spoofed * [NOTE] Username & password is still available when you enter the field * [SETTING] Privacy & Security>Logins and Passwords>Autofill logins and passwords * [1] https://freedom-to-tinker.com/2017/12/27/no-boundaries-for-user-identities-web-trackers-exploit-browser-login-managers/ ***/ "signon.autofillForms" = false; /* 0909: disable formless login capture for Password Manager [FF51+] ***/ "signon.formlessCapture.enabled" = false; /* 0912: limit (or disable) HTTP authentication credentials dialogs triggered by sub-resources [FF41+] * hardens against potential credentials phishing * 0=don't allow sub-resources to open HTTP authentication credentials dialogs * 1=don't allow cross-origin sub-resources to open HTTP authentication credentials dialogs * 2=allow sub-resources to open HTTP authentication credentials dialogs (default) ***/ "network.auth.subresource-http-auth-allow" = 1; /* 0913: disable automatic authentication on Microsoft sites [FF91+] [WINDOWS 10+] * [SETTING] Privacy & Security>Logins and Passwords>Allow Windows single sign-on for... * [1] https://support.mozilla.org/kb/windows-sso ***/ "network.http.windows-sso.enabled" = false; }