Firefox needs to work better with Apple Rated 1 out of 5 stars

Firefox keychain Services Add-On says:

"Note about iCloud: Because of Apple security controls, it does not seem possible to support iCloud storage unless Mozilla chooses to distribute Firefox via the App Store. Appropriate entitlements must also be requested when building the application. Unfortunately, it's not clear that either of these is likely to happen soon."

Why can't Firefox work within Apple's security model. Is it a case of egotistical developers who only do things their way?

FF 49+ compatibility Rated 5 out of 5 stars

Thaaaanks for updating this addon,
cause its is very important for my workflow and also it is important to have the newest FF version installed. :)
Thanks a lot !!

Yeaht it works as great as ever, for FF49! Rated 5 out of 5 stars

This is a really great tool!
And so fast updated.
Thanks a lot! :)

All fixed for FF 49! Rated 5 out of 5 stars

Thank you so much to the developer for finding time to fix this in response to the changes Mozilla made to FF49. Could not recommend more for Mac users who'd like Keychain integration.

This user has a previous review of this add-on.

Awesome extension Rated 5 out of 5 stars

It is in my top 3 favorite extensions and works flawlessly. Really, it should be the Firefox default.

This review is for a previous version of the add-on (1.1.9.1-signed.1-signed). 

Excellent, but not working with FF 49 Rated 5 out of 5 stars

Not sure if this an e10 problem or not, but once Developer Edition upgraded from 48 to 49, this extension stopped working.

This review is for a previous version of the add-on (1.1.9.1-signed.1-signed). 

Well spotted - not related to multi-process though as far as I can see. Seems LoginManager has changed and is now calling searchLogins() which I never implemented.

Probably not too hard to do so – if anyone has time and wants to fix and submit a pull request on github that would be terrific. Not sure when I'll have time to get to it at the moment unfortunately....

In the meantime, I've marked as only compatible up to 48.* for now.

Security Issues Showing Password? Rated 4 out of 5 stars

This is a very nice and useful add-on for Firefox.

Though with this add-on, isn't there a bit of a security issue in allowing the passwords to be seen in Firefox > Preferences > Security > Saved Logins... > Show Passwords ?

Anyone getting on to your computer can go to Firefox and see all the Keychain web passwords without having to enter the Mac's login password.

In Safari, you can only see the web passwords if you enter your Mac login password. And the same is true in Keychain itself. I think that is a safer system.

But a pretty good add-on in general.

This review is for a previous version of the add-on (1.1.9.1-signed.1-signed). 

I sort of agree but, I'm only replacing the password saving mechanism – it's Firefox that chooses to show you the passwords it reads from the password database.

Safari's also not offering much protection, to be honest. If you've allowed a browser access to a particular password and your keychain is unlocked, someone with control of your computer could simply go to the website in question, allow the password to be filled, and then copy the value from the password field (possibly using JavaScript if necessary).

Basically, if you want to keep a password secure from someone with physical access to your computer, you shouldn't store it in an unlocked keychain.

Firefox 42 issue Rated 5 out of 5 stars

Great plugin, using it for over 5 years.
Current problem is that Firefox 42+ doesn't save or update passwords. Tested on new install, blank profile.

This review is for a previous version of the add-on (1.1.9.1-signed.1-signed). 

With FF 39 the buttons from >FF> toolbar does not work anymore Rated 1 out of 5 stars

With 39.0 version of FF it does not work fine. Buttons from toolbar such as Download, Preferences does not work (only via Menu).

This review is for a previous version of the add-on (1.1.9.1-signed.1-signed). 

Sorry you're having trouble; why do you think this extension is the cause of the problems you are seeing? It doesn't do anything to the toolbar, so I don't know why it would be impacting that. I'm also using FF 39.0 myself right now and all seems normal.

If you haven't already, please try disabling extensions one at a time to confirm which is causing the problem. If it really is this one, then please enable debug logging as explained on the extension info page and send me the full logs by email.

Working flawlessly for over a year Rated 5 out of 5 stars

I've been using this on my Macbook Pro for over a year. I depend on Keychain Services to store ALL of my login credentials - and this gives Firefox seamless access to this information. Chrome seems to have this built in - so this plugin seems like a no-brainer. Thanks again!

This review is for a previous version of the add-on (1.1.9.1-signed.1-signed). 

Choosy about the hostname for a site? Rated 5 out of 5 stars

I've having semi-success with this extension. Three scenarios... (1) some sites it's not offering any password assistance, (2) some sites it's only using the previousy-stored password prior to me installing this extension, and (3) other sites it's working perfectly.

Is the extension choosy about the hostname for a site? I'm having trouble with .ca domains, for example, but not .org.

UPDATE - It seems that Keychain access was not granted to Firefox until after a relaunch (a second time). As soon as I launched it again and visited the login form, it prompted me for Keychain access and then auto-fill worked correctly. Thanks. :)

This review is for a previous version of the add-on (1.1.8.1-signed.1-signed). 

It sounds more likely that some of the sites your'e visiting have disabled autocompletion on their password fields. Firefox honours that request, so the extension has very little involvement in any of that, basically just doing what it's told (or not doing what it's not told in this case). There may be some differences between browser choices here, but you could compare behaviour in Safari or Chrome - do they offer to store passwords for those sites?

Also, I have to jump through some hoops to try to work with passwords stored by Chrome and Safari, so it could also be that there's still some funny behaviour there if you've saved passwords for some of the problematic sites in another browser...

No special logic based on domain names.

Keychain Integration works for SeaMonkey in OSX! Rated 5 out of 5 stars

Dear Keychain Integration: Thanks very much for your great add-on! This review is specific to OSX (10.7.5 Lion) and (surprisingly), the SeaMonkey browser/email-client. This (IMO) is the "best", most secure browser/email-client going (uses current software version of FF/TB). But the problem in OSX is that FF/TB and SeaMonkey won't integrate with the OSX Keychain for passwords. With Keychain Integration 1.1.8, the "Keychain" works perfectly! Julian Fitzell, please add your wonderful add-on to the SeaMonkey Add-ons, and again: thanks so much for your add-on! This is an important security improvement in OSX.

This review is for a previous version of the add-on (1.1.8.1-signed.1-signed). 

Hmm... it seems like only Firefox compatibility gets updated automatically with each new release. I've updated Thunderbird and SeaMonkey compatibility to the latest versions—haven't actually tested it, though, so hopefully it stil works! :)

Rated 4 out of 5 stars

I tested this add-on on the normal Firefox, works great, but since I switched to Firefox Developer Edition (v37, old Aurora channel) the add-on does not work anymore. Can you please take a look? I really think it is very important for developers to save their passwords in a safe place. Keep up the good work!

Later edit: well after I enabled debug, it seems it works, but on preferences page / security it does no longer say "your passwords are managed by an extension", but instead I can click on view passwords and he shows them in plain text without any master password or keychain password. Useless in this case, this is exactly what I wanted to avoid with this addon. Sharing password between browsers is nice, but not as important as protecting your passwords in my opinion.

This review is for a previous version of the add-on (1.1.8.1-signed.1-signed). 

I've just tested with 37.0a2 (2015-01-24) and it's working fine for me. (I had to reinstall the Addon though as Developer Edition now creates a new profile and thus does not have your extensions loaded at first)

If you're sure there's a problem, please enable debugging and file a bug report with the log output. Thanks.

Problems running on thunderbird 31.3 Rated 3 out of 5 stars

Something seems to be missing when installing/using with thunderbird 31.3 (this occurs at startup when I say "Ok" to importing passwords):

Timestamp: 12/27/14, 7:25:20 PM
Error: Keychain: Initialization of mozilla login storage component failed: Error: Cannot find a default implementation of nsILoginManagerStorage
Source File: resource://macos-keychain/MacOSKeychain.jsm:140
Line: 4

This review is for a previous version of the add-on (1.1.8.1-signed.1-signed). 

Hmm... thanks - I'll have a look when I have a moment. Could you create a bug report at https://code.google.com/p/mozilla-keychain/issues/entry ? And when doing so, could you let me know if it works from then on (i.e. is it just the import that is failing?)

Rated 2 out of 5 stars

New reply: Problem is that it does not store anything in my keychain nor read from keychain after the first initial import. It does not log anything in Web Console or to syslog so I suspect it isn't being activate at all. Any tip on how to troubleshoot? (I already created a new firefox profile but that didnt do anythin)

Cannot get this to work at all on 31ESR. Plug-in is installed, I see in "Prefs / Security" that passwords are managed by the plug-in. On first launch my stored passwords are imported to Keychain but then nothing more happens. All passwords are still stored in the signon.db, no passwords are read from keychain. Nothing is logged to Tools / Webconsole even with the debug-logging enabled. Any suggestions?

This review is for a previous version of the add-on (1.1.8.1-signed.1-signed). 

Console.app may show more logging detail. I don't see how you could get the importer without any logging showing up. The passwords are not removed from signon.db and the extension will still fall through to there if it can't find a matching password in the Keychain. Also note that Safari now stores passwords in iCloud keychain, which Firefox does not have access to. Both Safari and Firefox will read from your login keychain, however.

Rated 5 out of 5 stars

Doesn't work here after update to v. 32.0.1 - it doesn't open the keychain anymore so no passwords seem to be remebered. Any idea?

/Dev was right (as always ;)) - i did not have the latest version - sorry, it works as expected now!

This review is for a previous version of the add-on (1.1.8.1-signed.1-signed). 

Are you definitely using the newest version of the add-on? Mozilla doesn't seem to be upgrading extensions automatically when you upgrade Firefox, even though the previous version is listed as incompatible with FF32.

Problems on TB - Resolved Rated 5 out of 5 stars

Everytime it starts on Thunderbird, I am asked to submit various passwords (my Mac password, my Gmail password and so on). Apparently it doesn't remember them. I got so fed up that, to be honest, I am not sure whether it actually works after vaulting the internal hurdles. If it worked like it does on FX, it would be five stars for me; but, at the moment, on TB, it's pretty useless. Just a question: why the completely different functionality on the two Mozilla platforms?

Update: Thank you for your quick reply. I followed your suggestion, but it unfortunately didn't work (incidentally, upon start-up, OS X gives me the choice to "allow" or "deny". There is no option to "always allow". I will contact you directly by e-mail to see if we can resolve this. Thanks again for responding so quickly.

FURTHER UPDATE: I followed up and found that the problem was apparently caused by the Google Contacts add-on. Once I disabled that, Keychain Services Integration started working as stated on Thunderbird. Now integrates perfectly in both TB and FX. The dev is always right ;-) and this is a great add-on.

This review is for a previous version of the add-on (1.1.8.1-signed.1-signed).  This user has a previous review of this add-on.

If you've asked OS X to "always allow" access to those passwords and it's still prompting, the usual cause is that your Thunderbird binary has been changed somehow and OS X no longer believes it is correctly signed. Try dragging Thunderbird to the trash, downloading again, and reinstalling.

There's no difference at all in the add-on for TB, Firefox, or any other Mozilla application. The extension implements a standard interface specified by Mozilla and tries as well as it can to map the requests into the Keychain subsystem; the different Mozilla applications may use the interface differently, of course, but in my experience there's not much difference. I don't use Thunderbird myself, so it's not as thoroughly tested there, but many other people use it successfully.

Works... almost Rated 4 out of 5 stars

This just seemed to work... until I needed to change my password. The instructions for changing a password in Thunderbird are already a little arcane (first locate a way to erase the password, then restart and you will be asked to fill in the new one); but with KSI enabled, I was not asked. This seems like a critical bug (at least need a doc fix asap). Note that I do have several email accounts that this Thunderbird knows about, each with a distinct password. (Thunderbird version: 24.6.0)

This review is for a previous version of the add-on (1.1.8.1-signed.1-signed). 

Hmm.. so Firefox asks you if you want to update the password whenever you change it on a website, but I'm not sure how Thunderbird handles that. The easiest thing will probably be to launch Keychain Access.app (inside the Utitlies folder in your Applications folder) and change it in the keychain directly.

Rated 5 out of 5 stars

Working like a charm after the update!

This review is for a previous version of the add-on (1.1.8.1-signed.1-signed).  This user has a previous review of this add-on.

excellent addon with one exception Rated 4 out of 5 stars

this is a great add-on. it works perfectly with the keychain.
is it possible for firefox not to prompt you even though the keychain info is already there for the website. currently, you have to click OK. if you can, it would be great

This review is for a previous version of the add-on (1.1.7.1-signed.1-signed).