Hacker News Reader

I do know the answer to this - Firefox is not an acceptable alternative to a strong password manager. Local admin can dump any passwords from Firefox, and I think a user can even dump their own passwords from Firefox on windows and Linux.

View on HN

I don't think that matters. Local admin can also install a rootkit or a keylogger. Physical/admin access is game over no matter what you use.

They do have a "primary password" these days which I believe encrypts the locally stored passwords and the locally stored sync key.

Reply on news.ycombinator.com