Toolkit:Password Manager/Password Generation

From New wiki
Jump to navigation Jump to search
  • Preferences:
    • signon.generation.available controls whether the feature is available for users (e.g. if the about:preferences UI should show).
    • signon.generation.enabled is the user pref to enable/disable the feature from about:preferences.

Firefox 70 (Desktop only)

See Y in AC MVP (AC stands for autocomplete) column of the backlog for work targeting Firefox 70.

Generate a single password format for all websites but allow the user to reveal and edit the password. Fill generated passwords via the two new UIs:

  • autocomplete on autocomplete="new-password" fields
  • context menu on any password field (even if it's not intended for new passwords)

Only a single field is filled for this version.

Generated passwords automatically save (if there are no conflicts) and/or a dismissed doorhanger appears to allow saving whenever one is filled. Any edits to the field that was filled should get reflected in the doorhanger and/or storage.

The user can reveal, edit and cut/copy the generated password when it is focused.

Generation is disabled in private windows for this initial version.

List of popular sites using autocomplete=new-password

Other sites

Firefox 72 (Desktop only)

bug 1566536 - Allow generating passwords in private windows

Firefox 74 (Desktop only)

bug 1595915 - Context Menu: have suggest secure password option at the top of the main list

Firefox 76 (Desktop only)

Use Fathom (machine learning model) to offer password generation on sites that don't use autocomplete="new-password"

Firefox 77 (Desktop only)

  • Fills both the new password field and the confirmation field at the same time (bug 1576490)

Uplift

<bugzilla> { 

 "f1": "status_whiteboard",
 "o1": "anywordssubstr",
 "v1": "[passwords:generation]",
 "f2": "status_whiteboard",
 "o2": "anywordssubstr",
 "v2": "[skyline]",
 "f3": "keywords",
 "o3": "nowords",
 "v3": "meta",
 "f4": "cf_status_firefox76",
 "o4": "nowords",
 "v4": "fixed wontfix verified",
 "f5": "cf_status_firefox77",
 "o5": "anywords",
 "v5": "fixed verified",
 "resolution": "FIXED",
 "include_fields": "priority, id, summary, whiteboard, cf_status_firefox70, cf_last_resolved, assigned_to",
 "order": "cf_last_resolved"

} </bugzilla>

Open Bugs

<bugzilla> { 

 "f1": "status_whiteboard",
 "o1": "anywordssubstr",
 "v1": "[passwords:generation]",
 "f3": "keywords",
 "o3": "nowords",
 "v3": "meta",
 "resolution": "---",
 "include_fields": "id, summary, priority, whiteboard, cf_status_firefox76, assigned_to",
 "order": "assigned_to,priority"

} </bugzilla>

Future

There are many enhancements possible for the feature which aren't part of the "AC MVP" column. Check the other rows for more details. Some of the key ones are:

  • Use heuristics to not autofill saved logins when autocomplete="new-password" isn't used (bug 1623431)
  • Generating a password more appropriate for the site (length, character classes, etc.)
  • Requesting a new generated password if the user needs a different one (bug 1569568)
  • etc.
Retrieved from "https://mozilla.mediawiki.site/w/index.php?title=Toolkit:Password_Manager/Password_Generation&oldid=1227117"