Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

How can I make Firefox "invalidate" it's saved HTTP Basic Auth credentials for a website from the client side?

Currently, I have to restart the browser, which is rather cumbersome with multiple tabs open.

Is there a way to do this without having to restart Firefox/clear the cache/etc.

share|improve this question
add comment

4 Answers

If you change username and password from the original session to one which will not authenticate, Firefox will destroy all reference to the old authentication and attempt the new one.

You can change/set authentication by adding user:pass@ to the beginning of the URL, example: http://user:pass@www.example.com/

If you are logged into www.example.com with user:pass then typing (adding to the beginning of the address) anything@ will cause this to happen, example: http://abc@www.example.com/

A fast fix which doesn't require any plugins.

Please note this only works for HTTP Basic Auth.

An additional side benefit is this will affect only the website you are interacting with. All other logins to any other website will remain active.

share|improve this answer
2  
This is an awesome answer. Simple, easy-to-use, no additional software required, and clever in a non-obviously obvious sort of way. –  wfaulk Mar 19 '13 at 16:30
    
On a side note, this should work with most other browsers also, including Chrome and Internet Explorer (IE) –  Drew Anderson Sep 19 '13 at 8:51
add comment

The Web Developer toolbar allows HTTP authentication to be reset within a browser session.

From Firefox's Context Menu, choose Web Developer -> Miscellaneous -> Clear Private Data -> HTTP Authentication.

share|improve this answer
add comment

The easiest way is to log out from the site instead of just closing the tab. If this is not an option and you know before hand you will be visiting a site you want forgotten you can install Sandboxie and run your Firefox (or any browser) in a sandbox. Delete the contents of the sandbox when done and everything you have done is gone.

share|improve this answer
10  
HTTP authentication is a special type of HTTP header that causes your web browser to prompt you for a user name and password, then re-send it automatically when it's needed. When a website uses this type of authentication, there is no way for the website to offer a log out option. In most browsers, you have to close the browser for it to forget your login information. –  Bavi_H Aug 28 '10 at 2:19
    
@Bavi_H: I've heard that some browsers will forget existing sessions if the site sends a HTTP 401 while logged in. –  grawity Oct 11 '11 at 17:46
    
Just clearing site cookies do not invalidate saved username and password for basic authentication. –  Petr Gladkikh Aug 28 '12 at 4:13
add comment

In Firefox 3 you can choose Clear Recent History from the Tools menu (Ctrl + Shift + Del). You can then select to just clear Active Logins from the details to just clear those sessions.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.