If you think this add-on violates Mozilla's add-on policies or has security or privacy issues, please report these issues to Mozilla using this form.
Please don't use this form to report bugs or request add-on features; this report will be sent to Mozilla and not to the add-on developer.
No setup required. It just worked.
Looking forward to Firefox Quantum support
Would be wonderful to see this addon updated for firefox 57+
Unfortunately Mozilla needs to implement new APIs in order to get this working in 57+. More details here: https://github.com/jfitzell/mozilla-keychain/issues/88
Feel free to add your voice to the relevant Bugzilla tickets:
Everything works except updating password. So I am able to create new record in keychain, but unable to update password. I can send you collected logs, just say where.
Best would be to raise a bug on https://github.com/jfitzell/mozilla-keychain
If you're not comfortable sharing the logs there, you can email them to me (first initial and last name at gmail.com)
Would also be good to know if this is with every site or only (a) certain one(s)
I installed your add-on and even restarted my computer, but it's still as if your add-on does not even exist. Besides, the note you made about removing passwords on shutdown does not seem to apply anymore.
I think I could find the debug information you requested, but how do I get it to you?
Best would be to raise a bug on https://github.com/jfitzell/mozilla-keychain or if you're not comfortable sharing the logs there, email them to me (first initial and last name at gmail.com)
Thanks for the pointer about clearing passwords on shutdown... looks like that functionality was removed in FF42. I've closed the relevant bug on github and will update the notes on the extension page.
I add this addon to Firefox, but it does not seem to do anything at all....
Is there a trick to it that I am missing??
This should really be part of ff like in Chrome. However, I have the issue that the passwords are not updated once they are set (i.e. if a password is changed and I enter the new one, ff asks me to update it but it is not updated, neither in the keychain nor in the ff password manager). Am I doing something wrong?
Yes, I still can't understand why FF doesn't support it natively. The extension should "just work" but there are lots of moving pieces controlled by Mozilla and Apple so when it fails it can be hard to work out why.
You can try turning on debug logging as explained on the add-on page and see if that highlights the problem. I'm afraid I don't have much time to spend on this these days but if the problem isn't clear, email the logs to me and I'll see if I can spot it easily.
it seems that the add on only uses the icloud keychain. is there any option how i could use both the login and the icloud keychain for autofill? also i would like to tell the addon whether to save a new password to the icloud or the login keychain
It should use your keychain search path, which should be the same order as the list you see in the top left pane in Keychain Access (you could confirm by running "security list-keychains" in the console)
There are two undocumented preferences, which I use mainly for testing:
extensions.macos-keychain.search-path - a colon-separated list of keychain paths to search for passwords (overriding the system search path)
extensions.macos-keychain.write-file - the path to the keychain where passwords should be stored
You can set both of these by going to "about:config" in Firefox
The problem is that the Local Items keychain used by iCloud isn't stored as a keychain file and doesn't seem to show up explicitly in the search path, so this may not give you exactly what you want. But it might let you find a workable solution.
So glad this exists.
It has a few glitches, like sometimes not picking up the latest keychain entry for a site/account but overall, great job!
UPDATE: Not working on Firefox Quantum
Great add-on that works just as it says. Unfortunately the approval process to do iCloud stuff means it does not work as we would all like :(
Disappointed that this add-on doesn't function as promised... only the usernames imported!
Firefox keychain Services Add-On says:
"Note about iCloud: Because of Apple security controls, it does not seem possible to support iCloud storage unless Mozilla chooses to distribute Firefox via the App Store. Appropriate entitlements must also be requested when building the application. Unfortunately, it's not clear that either of these is likely to happen soon."
Why can't Firefox work within Apple's security model. Is it a case of egotistical developers who only do things their way?
Thaaaanks for updating this addon,
cause its is very important for my workflow and also it is important to have the newest FF version installed. :)
Thanks a lot !!
This is a really great tool!
And so fast updated.
Thanks a lot! :)
Thank you so much to the developer for finding time to fix this in response to the changes Mozilla made to FF49. Could not recommend more for Mac users who'd like Keychain integration.
It is in my top 3 favorite extensions and works flawlessly. Really, it should be the Firefox default.
Not sure if this an e10 problem or not, but once Developer Edition upgraded from 48 to 49, this extension stopped working.
Well spotted - not related to multi-process though as far as I can see. Seems LoginManager has changed and is now calling searchLogins() which I never implemented.
Probably not too hard to do so – if anyone has time and wants to fix and submit a pull request on github that would be terrific. Not sure when I'll have time to get to it at the moment unfortunately....
In the meantime, I've marked as only compatible up to 48.* for now.
This is a very nice and useful add-on for Firefox.
Though with this add-on, isn't there a bit of a security issue in allowing the passwords to be seen in Firefox > Preferences > Security > Saved Logins... > Show Passwords ?
Anyone getting on to your computer can go to Firefox and see all the Keychain web passwords without having to enter the Mac's login password.
In Safari, you can only see the web passwords if you enter your Mac login password. And the same is true in Keychain itself. I think that is a safer system.
But a pretty good add-on in general.
I sort of agree but, I'm only replacing the password saving mechanism – it's Firefox that chooses to show you the passwords it reads from the password database.
Basically, if you want to keep a password secure from someone with physical access to your computer, you shouldn't store it in an unlocked keychain.
Great plugin, using it for over 5 years.
Current problem is that Firefox 42+ doesn't save or update passwords. Tested on new install, blank profile.
With 39.0 version of FF it does not work fine. Buttons from toolbar such as Download, Preferences does not work (only via Menu).
Sorry you're having trouble; why do you think this extension is the cause of the problems you are seeing? It doesn't do anything to the toolbar, so I don't know why it would be impacting that. I'm also using FF 39.0 myself right now and all seems normal.
If you haven't already, please try disabling extensions one at a time to confirm which is causing the problem. If it really is this one, then please enable debug logging as explained on the extension info page and send me the full logs by email.
I've been using this on my Macbook Pro for over a year. I depend on Keychain Services to store ALL of my login credentials - and this gives Firefox seamless access to this information. Chrome seems to have this built in - so this plugin seems like a no-brainer. Thanks again!
I've having semi-success with this extension. Three scenarios... (1) some sites it's not offering any password assistance, (2) some sites it's only using the previousy-stored password prior to me installing this extension, and (3) other sites it's working perfectly.
Is the extension choosy about the hostname for a site? I'm having trouble with .ca domains, for example, but not .org.
UPDATE - It seems that Keychain access was not granted to Firefox until after a relaunch (a second time). As soon as I launched it again and visited the login form, it prompted me for Keychain access and then auto-fill worked correctly. Thanks. :)
It sounds more likely that some of the sites your'e visiting have disabled autocompletion on their password fields. Firefox honours that request, so the extension has very little involvement in any of that, basically just doing what it's told (or not doing what it's not told in this case). There may be some differences between browser choices here, but you could compare behaviour in Safari or Chrome - do they offer to store passwords for those sites?
Also, I have to jump through some hoops to try to work with passwords stored by Chrome and Safari, so it could also be that there's still some funny behaviour there if you've saved passwords for some of the problematic sites in another browser...
No special logic based on domain names.
Dear Keychain Integration: Thanks very much for your great add-on! This review is specific to OSX (10.7.5 Lion) and (surprisingly), the SeaMonkey browser/email-client. This (IMO) is the "best", most secure browser/email-client going (uses current software version of FF/TB). But the problem in OSX is that FF/TB and SeaMonkey won't integrate with the OSX Keychain for passwords. With Keychain Integration 1.1.8, the "Keychain" works perfectly! Julian Fitzell, please add your wonderful add-on to the SeaMonkey Add-ons, and again: thanks so much for your add-on! This is an important security improvement in OSX.
Hmm... it seems like only Firefox compatibility gets updated automatically with each new release. I've updated Thunderbird and SeaMonkey compatibility to the latest versions—haven't actually tested it, though, so hopefully it stil works! :)
I tested this add-on on the normal Firefox, works great, but since I switched to Firefox Developer Edition (v37, old Aurora channel) the add-on does not work anymore. Can you please take a look? I really think it is very important for developers to save their passwords in a safe place. Keep up the good work!
Later edit: well after I enabled debug, it seems it works, but on preferences page / security it does no longer say "your passwords are managed by an extension", but instead I can click on view passwords and he shows them in plain text without any master password or keychain password. Useless in this case, this is exactly what I wanted to avoid with this addon. Sharing password between browsers is nice, but not as important as protecting your passwords in my opinion.
I've just tested with 37.0a2 (2015-01-24) and it's working fine for me. (I had to reinstall the Addon though as Developer Edition now creates a new profile and thus does not have your extensions loaded at first)
If you're sure there's a problem, please enable debugging and file a bug report with the log output. Thanks.
Something seems to be missing when installing/using with thunderbird 31.3 (this occurs at startup when I say "Ok" to importing passwords):
Timestamp: 12/27/14, 7:25:20 PM
Error: Keychain: Initialization of mozilla login storage component failed: Error: Cannot find a default implementation of nsILoginManagerStorage
Source File: resource://macos-keychain/MacOSKeychain.jsm:140
Hmm... thanks - I'll have a look when I have a moment. Could you create a bug report at https://code.google.com/p/mozilla-keychain/issues/entry ? And when doing so, could you let me know if it works from then on (i.e. is it just the import that is failing?)
New reply: Problem is that it does not store anything in my keychain nor read from keychain after the first initial import. It does not log anything in Web Console or to syslog so I suspect it isn't being activate at all. Any tip on how to troubleshoot? (I already created a new firefox profile but that didnt do anythin)
Cannot get this to work at all on 31ESR. Plug-in is installed, I see in "Prefs / Security" that passwords are managed by the plug-in. On first launch my stored passwords are imported to Keychain but then nothing more happens. All passwords are still stored in the signon.db, no passwords are read from keychain. Nothing is logged to Tools / Webconsole even with the debug-logging enabled. Any suggestions?
Console.app may show more logging detail. I don't see how you could get the importer without any logging showing up. The passwords are not removed from signon.db and the extension will still fall through to there if it can't find a matching password in the Keychain. Also note that Safari now stores passwords in iCloud keychain, which Firefox does not have access to. Both Safari and Firefox will read from your login keychain, however.