Firefox password manager
firefox.comFree password manager built into Firefox; Firefox Sync is end-to-end encrypted, and the Primary Password that protects local logins is off by default.
- Owner
- Mozilla Foundation
- Based in
- United States
- Founded
- 1998
- Type
- Built into a browser or OS
- Free plan
- Free, built in
- Built into Firefox; syncs with a free Mozilla account
- Personal plan
- No paid plan
- Latest audit
- None published
- No named, dated audit found
- On record
- No incidents found
- in our research
- No published third-party audit found
- All apps are open source
- Has a free plan
How Firefox password manager encrypts your vault
From Firefox password manager's security documentation, next to the other 22. Firefox password manager is outlined.
End-to-end encrypted
Encrypted on your device before it's stored (like 20 others)
Cipher: AES-256-CBC locally; AES-256-GCM for Sync
Yes 21
Optional 1
No 1
Website addresses encrypted
Encrypted with the rest of the item (like 18 others)
Full login records are encrypted.
Encrypted 19
Readable 1
Not documented 3
Item names encrypted
Not documented (18 of 23 document it)
Encrypted 17
Readable 1
Not documented 5
Memory-hard password hashing
Not documented (16 of 23 document it)
Memory-hard 3
Not memory-hard 11
Not documented 7
Doesn't apply 2
Extra secret key
Doesn't apply to this kind of product (like 3 others)
No separate secret key.
Yes 1
No 14
Not documented 4
Doesn't apply 4
What you'll pay
Built into Firefox; syncs with a free Mozilla account
Free plan
Free
Free with Firefox; unlimited items; sync needs a free Mozilla account
Personal plan
None
After the first year
—
Family plan
None
- Business:
- None
- Free trial:
- not-applicable
- Money-back:
- not-applicable
Audits
Independent security reviews, newest first.
No published third-party audit with a named auditor found for Firefox password manager.
- Open-source appsAll appsAll apps
- Open-source serverNot verifiedNot verified
- Run it yourselfNoNo
- Bug bountyYesYes
Incidents
Breaches, stolen data and serious flaws on record.
None found in our research. Apps, browsers and passkeys
- WindowsYesYes
- macOSYesYes
- LinuxYesYes
- iPhoneYesYes
- AndroidYesYes
- Web vaultNoNo
- ChromeNoNo
- FirefoxYesYes
- SafariNoNo
- EdgeNoNo
- Saves and fills passkeysNoNo
- Unlock the vault with a passkeyYesYes
- Passkey import and export (CXP)Not verifiedNot verified
Sharing, recovery and extras
- Shared vaultsNot verifiedNot verified
- Share with non-usersNot verifiedNot verified
- Emergency accessNot verifiedNot verified
- 2FA codes built inNot verifiedNot verified
- Breach monitoringYesYes
- Email aliasesYesYes
- File attachmentsNot verifiedNot verified
- SSH keys and agentNot verifiedNot verified
- Command lineNot verifiedNot verified
- Encrypted exportNot verifiedNot verified
- Works offlineYesYes
- Authenticator-app 2FAYesYes
- Security key for 2FAYesYes
- Password health reportNot verifiedNot verified
- CSV exportNot verifiedNot verified
Compare Firefox password manager with
All sources for Firefox password manager (9)
- Research summary of the vendor's pages (no single link)AI-assisted research, spot-checked, checked 2026-10-16
- Mozilla support: Primary PasswordVendor, checked 2026-10-16
- Mozilla support: how Firefox securely saves passwordsVendor, checked 2026-10-16
- Mozilla Hacks: Firefox Sync privacyVendor, checked 2026-10-16
- Research summary of the vendor's pages (no single link)AI-assisted research, spot-checked, checked 2026-10-16
- Firefox password managerVendor, checked 2026-10-16
- Mozilla support: manage loginsVendor, checked 2026-10-16
- Mozilla support: use a passkey with your Mozilla accountVendor, checked 2026-10-16
- Mozilla support: Primary Password and SyncVendor, checked 2026-10-16