Security Options

Security Options

Warn me when sites try to install add-ons

Firefox will always ask you to confirm installations of add-ons. To prevent unrequested installation prompts which may lead to accidental installations, Firefox warns you when a web site tries to install an add-on and blocks the installation prompt. To allow installations from a specific site, click Exceptions..., enter the site name, and click Allow. Uncheck this Option to disable the warning for all sites.

Tell me if the site I'm visiting is a suspected forgery

Check this Option if you want Firefox to actively check whether the site you are visiting may be an attempt to mislead you into providing personal information (this is often referred to as phishing).

Check using a downloaded list of suspected sites

With this Option selected, Firefox will check the current site against a frequently updated list stored on your computer. No data about the sites you visit is transferred to third-party anti-phishing providers during normal browsing. Since phishing techniques and sites evolve quickly, this mode of protection may not be as effective as having an anti-phishing provider check every site you visit.

Check by asking ... about each site I visit

With this Option selected, Firefox will send the address of the current page over an encrypted connection to the selected third-party anti-phishing provider in order to verify its identity. This method offers the greatest protection, but information such as your IP address and browser version may be transfered and stored by the selected provider. You will be prompted to review and agree to the selected data provider's privacy policy after selecting this Option.

Passwords

Remember passwords for sites

Firefox can securely save passwords you enter in web forms to make it easier to log on to web sites. Clear this checkbox to prevent Firefox from remembering your passwords.

Even with this Option checked, however, you'll still be asked whether to save passwords for a site when you first visit it. If you select Never for This Site, that site will be added to an exceptions list. To access that list or to remove sites from it, click the Exceptions... button.

Use a master password

Firefox can protect sensitive information such as saved passwords and certificates by encrypting them using a master password. If you create a master password, each time you start Firefox, it will ask you to enter the password the first time it needs to access a certificate or stored password. You can set, change, or remove the master password by checking or unchecking this Option or by clicking the Change Master Password... button. If a master password is already set, you will need to enter it in order to change or remove the master password.

Show Passwords...

You can manage saved passwords and delete individual passwords by clicking the View Saved Passwords button.

Warning Messages

Click the Settings... button to configure the security warnings Firefox displays while you browse the web.

Security Warnings Dialog

I am about to view an encrypted page

When this Option is enabled, Firefox will notify you every time you are about to view an encrypted page.

I am about to view a page that uses low-grade encryption

With this Option enabled, Firefox will warn you when you visit a page which uses low-grade encryption.

I leave an encrypted page for one that isn't encrypted

With this Option enabled, Firefox will warn you every time you move from an encrypted page to an unencrypted page either by selecting a link on the page, selecting a bookmark or typing a new address into the location bar.

I submit information that's not encrypted

When this Option is enabled, Firefox will warn you when you submit data via a form that's not encrypted.

I'm about to view an encrypted page that contains some unencrypted information

With this Option enabled, Firefox will warn you when the page you're viewing contains a mixture of encrypted and unencrypted content. If an encrypted page contains unencrypted data, you should verify the identity of the page you're viewing prior to entering sensitive data.