1) Give clear, trusted, positive feedback that you're on the correct login page
It will change the theme color of Firefox temporarily (to green) when you're entering your credentials on a white-listed domain (i.e. a domain that is authorized to handle your credentials). This list can be customized in the extension's preferences if necessary.
2) Detect when your credentials are sent to a site that isn't white-listed
It will capture and record a salted hash of your credentials the first time you enter them after the extension was installed. It then monitors for data posted to websites and if anything matches your credential hash, it will prevent Firefox from sending the credentials. For example if you enter your Mozilla LDAP credentials on a site that isn't using Mozilla IAM SSO for example, it will prevent the credentials from being sent and warn you about it.
SECURITY RELEVANT INFORMATION: The detection is opportunistic and there are known ways to bypass the detection. While it will most likely detect most phishing attempts, an advanced attacker could work around this protection.
This second option can be turned off in the extension preferences.
Report this add-on for abuse
If you think this add-on violates Mozilla's add-on policies or has security or privacy issues, please report these issues to Mozilla using this form.
Please don't use this form to report bugs or request add-on features; this report will be sent to Mozilla and not to the add-on developer.
This add-on can:
- Access your data for all websites
- Clear recent browsing history, cookies, and related data
- Access browser tabs
- Add-on Links
- 47.68 KB
- Last updated
- 7 months ago (Jul 30, 2019)
- Mozilla Public License, version 2.0
- Version History
- Phishing detection now uses a full screen page warning instead of a notification + theme color change. The page also links to a place that explains what phishing is
- Phishing detection more reliably block requests
- Credential hash for phishing detection is now additionally salted