Mozilla password management application , which was developed under the code name Lockbox. Lockwise includes mobile applications for Android and iOS, allowing access to passwords saved in Firefox on any of the user's devices without the need to install Firefox on them. The autofill feature for passwords in authentication forms of any mobile applications is supported. The project code under the MPL 2.0 license.
uses the standard functionality of the Firefox browser and an account with Firefox Account for password synchronization. Devices with Lockwise connect to the synchronization system similarly to how different instances of the browser connect. Data protection is implemented using the AES-256-GCM block cipher and keys based on PBKDF2 and HKDF with hashing via SHA-256. The key transmission is facilitated by a protocol , which ensures that the key is stored on the user’s side and applies end-to-end encryption without storing decrypted data or keys on an external server. The encryption key is based on the specified login and password for the account, with the account itself only used for transit storage of already encrypted data.
In addition to mobile applications, the project also includes the Lockwise browser extension, offering an alternative to the built-in Firefox interface for managing saved passwords. When the extension is installed, a button appears in the toolbar that allows for quick viewing of accounts saved for the current site, as well as performing search and editing operations for passwords. Currently, the extension is in an experimental development stage (alpha version) and cannot function when installed in the browser with a master password. ongoing to include Lockwise as a core component of Firefox as a system extension.
The Lockwise mobile applications are in beta testing, but the first stable release is expected next week. The applications have telemetry enabled by default, providing aggregated information about the application's performance. In the meantime, the built-in password manager of Firefox
. the ability to handle user accounts in the context of a top-level domain, allowing one saved password for all subdomains. For example, the password saved for login.example.com will now be suggested for autofill in forms on the site www.example.com. This change will be included in Firefox 69.
In Firefox 69, it is also the inclusion which processes handlers, to pass information about the most prioritized processes to the operating system. For example, the content processing process handling the active tab will be given a higher priority (with more CPU resources allocated) than the processes associated with background tabs (if they are not playing video or audio). This change is currently planned to be enabled by default only for the Windows platform; other systems will require activation of the option dom.ipc.processPriorityManager.enabled in about:config.
Source: opennet.ru
