Security Issues Showing Password? Rated 4 out of 5 stars
This is a very nice and useful add-on for Firefox.
Though with this add-on, isn't there a bit of a security issue in allowing the passwords to be seen in Firefox > Preferences > Security > Saved Logins... > Show Passwords ?
Anyone getting on to your computer can go to Firefox and see all the Keychain web passwords without having to enter the Mac's login password.
In Safari, you can only see the web passwords if you enter your Mac login password. And the same is true in Keychain itself. I think that is a safer system.
But a pretty good add-on in general.
I sort of agree but, I'm only replacing the password saving mechanism – it's Firefox that chooses to show you the passwords it reads from the password database.
Basically, if you want to keep a password secure from someone with physical access to your computer, you shouldn't store it in an unlocked keychain.
Firefox 42 issue Rated 5 out of 5 stars
Great plugin, using it for over 5 years.
Current problem is that Firefox 42+ doesn't save or update passwords. Tested on new install, blank profile.
With FF 39 the buttons from >FF> toolbar does not work anymore Rated 1 out of 5 stars
With 39.0 version of FF it does not work fine. Buttons from toolbar such as Download, Preferences does not work (only via Menu).
Sorry you're having trouble; why do you think this extension is the cause of the problems you are seeing? It doesn't do anything to the toolbar, so I don't know why it would be impacting that. I'm also using FF 39.0 myself right now and all seems normal.
If you haven't already, please try disabling extensions one at a time to confirm which is causing the problem. If it really is this one, then please enable debug logging as explained on the extension info page and send me the full logs by email.
Working flawlessly for over a year Rated 5 out of 5 stars
I've been using this on my Macbook Pro for over a year. I depend on Keychain Services to store ALL of my login credentials - and this gives Firefox seamless access to this information. Chrome seems to have this built in - so this plugin seems like a no-brainer. Thanks again!
Choosy about the hostname for a site? Rated 5 out of 5 stars
I've having semi-success with this extension. Three scenarios... (1) some sites it's not offering any password assistance, (2) some sites it's only using the previousy-stored password prior to me installing this extension, and (3) other sites it's working perfectly.
Is the extension choosy about the hostname for a site? I'm having trouble with .ca domains, for example, but not .org.
UPDATE - It seems that Keychain access was not granted to Firefox until after a relaunch (a second time). As soon as I launched it again and visited the login form, it prompted me for Keychain access and then auto-fill worked correctly. Thanks. :)
It sounds more likely that some of the sites your'e visiting have disabled autocompletion on their password fields. Firefox honours that request, so the extension has very little involvement in any of that, basically just doing what it's told (or not doing what it's not told in this case). There may be some differences between browser choices here, but you could compare behaviour in Safari or Chrome - do they offer to store passwords for those sites?
Also, I have to jump through some hoops to try to work with passwords stored by Chrome and Safari, so it could also be that there's still some funny behaviour there if you've saved passwords for some of the problematic sites in another browser...
No special logic based on domain names.
Keychain Integration works for SeaMonkey in OSX! Rated 5 out of 5 stars
Dear Keychain Integration: Thanks very much for your great add-on! This review is specific to OSX (10.7.5 Lion) and (surprisingly), the SeaMonkey browser/email-client. This (IMO) is the "best", most secure browser/email-client going (uses current software version of FF/TB). But the problem in OSX is that FF/TB and SeaMonkey won't integrate with the OSX Keychain for passwords. With Keychain Integration 1.1.8, the "Keychain" works perfectly! Julian Fitzell, please add your wonderful add-on to the SeaMonkey Add-ons, and again: thanks so much for your add-on! This is an important security improvement in OSX.This review is for a previous version of the add-on (220.127.116.11-signed.1-signed).
Hmm... it seems like only Firefox compatibility gets updated automatically with each new release. I've updated Thunderbird and SeaMonkey compatibility to the latest versions—haven't actually tested it, though, so hopefully it stil works! :)
Rated 4 out of 5 stars
I tested this add-on on the normal Firefox, works great, but since I switched to Firefox Developer Edition (v37, old Aurora channel) the add-on does not work anymore. Can you please take a look? I really think it is very important for developers to save their passwords in a safe place. Keep up the good work!
Later edit: well after I enabled debug, it seems it works, but on preferences page / security it does no longer say "your passwords are managed by an extension", but instead I can click on view passwords and he shows them in plain text without any master password or keychain password. Useless in this case, this is exactly what I wanted to avoid with this addon. Sharing password between browsers is nice, but not as important as protecting your passwords in my opinion.
I've just tested with 37.0a2 (2015-01-24) and it's working fine for me. (I had to reinstall the Addon though as Developer Edition now creates a new profile and thus does not have your extensions loaded at first)
If you're sure there's a problem, please enable debugging and file a bug report with the log output. Thanks.
Problems running on thunderbird 31.3 Rated 3 out of 5 stars
Something seems to be missing when installing/using with thunderbird 31.3 (this occurs at startup when I say "Ok" to importing passwords):
Timestamp: 12/27/14, 7:25:20 PM
Error: Keychain: Initialization of mozilla login storage component failed: Error: Cannot find a default implementation of nsILoginManagerStorage
Source File: resource://macos-keychain/MacOSKeychain.jsm:140
Hmm... thanks - I'll have a look when I have a moment. Could you create a bug report at https://code.google.com/p/mozilla-keychain/issues/entry ? And when doing so, could you let me know if it works from then on (i.e. is it just the import that is failing?)
Rated 2 out of 5 stars
New reply: Problem is that it does not store anything in my keychain nor read from keychain after the first initial import. It does not log anything in Web Console or to syslog so I suspect it isn't being activate at all. Any tip on how to troubleshoot? (I already created a new firefox profile but that didnt do anythin)
Cannot get this to work at all on 31ESR. Plug-in is installed, I see in "Prefs / Security" that passwords are managed by the plug-in. On first launch my stored passwords are imported to Keychain but then nothing more happens. All passwords are still stored in the signon.db, no passwords are read from keychain. Nothing is logged to Tools / Webconsole even with the debug-logging enabled. Any suggestions?
Console.app may show more logging detail. I don't see how you could get the importer without any logging showing up. The passwords are not removed from signon.db and the extension will still fall through to there if it can't find a matching password in the Keychain. Also note that Safari now stores passwords in iCloud keychain, which Firefox does not have access to. Both Safari and Firefox will read from your login keychain, however.
Rated 5 out of 5 stars
Doesn't work here after update to v. 32.0.1 - it doesn't open the keychain anymore so no passwords seem to be remebered. Any idea?
/Dev was right (as always ;)) - i did not have the latest version - sorry, it works as expected now!
Are you definitely using the newest version of the add-on? Mozilla doesn't seem to be upgrading extensions automatically when you upgrade Firefox, even though the previous version is listed as incompatible with FF32.
Problems on TB - Resolved Rated 5 out of 5 stars
Everytime it starts on Thunderbird, I am asked to submit various passwords (my Mac password, my Gmail password and so on). Apparently it doesn't remember them. I got so fed up that, to be honest, I am not sure whether it actually works after vaulting the internal hurdles. If it worked like it does on FX, it would be five stars for me; but, at the moment, on TB, it's pretty useless. Just a question: why the completely different functionality on the two Mozilla platforms?
Update: Thank you for your quick reply. I followed your suggestion, but it unfortunately didn't work (incidentally, upon start-up, OS X gives me the choice to "allow" or "deny". There is no option to "always allow". I will contact you directly by e-mail to see if we can resolve this. Thanks again for responding so quickly.
FURTHER UPDATE: I followed up and found that the problem was apparently caused by the Google Contacts add-on. Once I disabled that, Keychain Services Integration started working as stated on Thunderbird. Now integrates perfectly in both TB and FX. The dev is always right ;-) and this is a great add-on.
If you've asked OS X to "always allow" access to those passwords and it's still prompting, the usual cause is that your Thunderbird binary has been changed somehow and OS X no longer believes it is correctly signed. Try dragging Thunderbird to the trash, downloading again, and reinstalling.
There's no difference at all in the add-on for TB, Firefox, or any other Mozilla application. The extension implements a standard interface specified by Mozilla and tries as well as it can to map the requests into the Keychain subsystem; the different Mozilla applications may use the interface differently, of course, but in my experience there's not much difference. I don't use Thunderbird myself, so it's not as thoroughly tested there, but many other people use it successfully.
Works... almost Rated 4 out of 5 stars
This just seemed to work... until I needed to change my password. The instructions for changing a password in Thunderbird are already a little arcane (first locate a way to erase the password, then restart and you will be asked to fill in the new one); but with KSI enabled, I was not asked. This seems like a critical bug (at least need a doc fix asap). Note that I do have several email accounts that this Thunderbird knows about, each with a distinct password. (Thunderbird version: 24.6.0)This review is for a previous version of the add-on (18.104.22.168-signed.1-signed).
Hmm.. so Firefox asks you if you want to update the password whenever you change it on a website, but I'm not sure how Thunderbird handles that. The easiest thing will probably be to launch Keychain Access.app (inside the Utitlies folder in your Applications folder) and change it in the keychain directly.
Rated 5 out of 5 stars
Working like a charm after the update!This review is for a previous version of the add-on (22.214.171.124-signed.1-signed). This user has a previous review of this add-on.
excellent addon with one exception Rated 4 out of 5 stars
this is a great add-on. it works perfectly with the keychain.
is it possible for firefox not to prompt you even though the keychain info is already there for the website. currently, you have to click OK. if you can, it would be great
Rated 4 out of 5 stars
The Plugin works pretty nice at my Firefox Nightly 32.0a1, except two things:
1) If you have syncing activated, and 'sync passwords' checked while using keychain-integration, the sync will fail with an unknown error. A simple fix, is to uncheck the password-syncing over Firefox-sync in the settings.
2) While keychain-integration is activated, the page-info tool doesn't longer display the tabs for 'media' and 'feeds'. I'm not sure whats the problem there, but please fix it in feature releases!
Everything else seams working great.
Perfect Rated 5 out of 5 stars
Does what it's suppose to. I can't understand why this feature isn't built into core yet. A nice bonus is that it works great in combination with the AutoAuth addon, for HTTP auths.This review is for a previous version of the add-on (126.96.36.199-signed.1-signed).
All good! Rated 5 out of 5 stars
Just what I was missing :)This review is for a previous version of the add-on (188.8.131.52-signed.1-signed).
Doesn't work well Rated 1 out of 5 stars
Doesn't see to work consistently.
Sometime it asks for authorization to access the keychain, but doesn't display any password. Other time, it doesn't ask but display the password. And sometime it does nothing despite the fact that I know the password is in the keychain (for having used it in Chrome).
It would be a very useful extension if it worked, but so far it's not quite there.
Rated 4 out of 5 stars
Extension works well. You can also use it to import your passwords to the 'login' keychain, even tough this is not the main intent.
But if you are looking into a way to use Firefox with iCloud keychain, this extension falls short. It integrates with the 'login' keychain, but iCloud keychain passwords are stored on the 'iCloud' keychain. That was a very close one, I hope the developer can make the bridge so the extension becomes 3 times better for iPhone users.
Unfortunately, Apple restricts the use of iCloud syncing to applications that are distributed via the App Store. Unless Mozilla moves to distributing this way (and requests permission to access iCloud when building the application—which seems unlikely unless they start using it), supporting iCloud does not seem possible. See http://code.google.com/p/mozilla-keychain/issues/detail?id=62
A must have for Mac all users! Rated 5 out of 5 stars
This plugin works as expected. There is nothing to configure, just install it and your passwords are stored to keychain and read from keychain instead of the internal storage or Firefox or Thunderbird.
For Mac users it just "feels natural" that applications store their passwords via the Keychain Service API. I was always disappointed that Firefox had no keychain support built-in; but for Thunderbird this was actually a showstopper! This addon is the *ONLY* reason why I started using Thunderbird again on the Mac! Finally I don't have to enter a Master Password each time Thunderbird is started, because w/o a Master Password your passwords are not really protected at all (every app with access to your profile folder can easily access and decrypt your e-mail passwords). Now all my mail passwords are securely stored in a keychain.
And I want to thank the author of this addon for implementing the Keychain Service API correctly! Some Mac developers, sometimes even Apple themselves, fail to use this API correctly. They always think the user will never have more than one keychain and this one keychain is always named "login". This is of course a major fail. The user may have hundreds of keychains, some may be shared with other users, some may not, and he is free to move items between them as he pleases. Sometimes, when I move a password from one keychain to another one, some apps fail to find it. Of course apps should always search all keychains in the Keychain List for their items, picking the first match found (as keychains are searched in a specific order that can also be controlled by the user) and they should always add new items to whatever keychain is the default keychain (which may not be named "login"). Actually both happens automatically if one doesn't tell Keychain Service otherwise. Also items should always be updated in place; some apps delete the old item first and then create a new one, but that can cause items to move from their current keychain back to the default keychain, it also causes a loss of access control rules, both is of course undesired. As far as I can see, this addon works exactly as it should :-)
Thanks for the kind words!