Mozilla Company password management app , which during the development process developed under the code name Lockbox. Lockwise includes mobile applications for Android and iOS that allow you to organize access to passwords saved in Firefox on any user device, without the need to install Firefox on them. The function of autofilling passwords in the authentication forms of any mobile applications is supported. Project code licensed under MPL 2.0.
To synchronize passwords, regular features of the Firefox browser and an account in Firefox Account are used. Devices with Lockwise connect to the sync system in the same way as connecting different browser instances. To protect the data, the AES-256-GCM block cipher and PBKDF2 and HKDF-based keys with hashing using SHA-256 are used. A protocol is used to transfer the keys , which provides user-side key storage and applies end-to-end encryption without storing decrypted data or keys on an external server. The encryption key is set based on the login and password specified for the account, the account itself is used only for transit storage of already encrypted data.
In addition to mobile applications, the project also Lockwise is a browser add-on that offers an alternative to Firefox's built-in interface for managing saved passwords. When installing the add-on, a button appears in the panel, through which you can quickly view the accounts saved for the current site, as well as perform search and password editing operations. Currently, the add-on is in the nature of experimental development (alpha version) and cannot yet work when a master password is set in the browser. on the inclusion of Lockwise in the main composition of Firefox as a system add-on.
Lockwise mobile apps are in beta, but first stable release for the next week. Enabled in apps by default. telemetry with generalized information about the features of working with the application.
Meanwhile, in the regular Firefox password manager the ability to process accounts in the context of a first-level domain, which allows you to offer one password stored for all subdomains. For example, the password saved for login.example.com will now be suggested for autofill in the www.example.com website forms. The change will be included in Firefox 69.
Also in Firefox 69 inclusion handler processes, which transfer information about the highest priority processes to the operating system. For example, a content process processing the active tab will be given a higher priority (more CPU resources allocated) than a process associated with background tabs (if they do not play video and sound). The change is currently planned to be enabled by default only for the Windows platform, for other systems, the activation of the dom.ipc.processPriorityManager.enabled option in about-config will be required.
Source: opennet.ru