Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is it safe to sync using the Firefox built-in password manager and sync functionality? Where do they save my passwords and how do they save? What will be the risk?

Should I use LastPass instead?

share|improve this question
up vote 2 down vote accepted

Sync is more reliable in terms you don't have to worry about LastPass going out of business. Also my experience with the LastPass software is not so good - I like the Firefox sync more.

The passwords are encrypted in browser before sending them to the sync server. Should you lose the encryption key ( nowadays 26 digits ) it is not possible to get the passwords.

Your concern should go to whether Lastpass is in business in 10 years, if you get malicious software on your computer reading keyboard or harddrive and whether you sync your passwords to unsecure computer on later time.

share|improve this answer
I tried switching to Lastpass to be able to sync with chrome because my laptop was getting slow but I think now it's easier to forget chrome and get a new laptop. – anttir Aug 16 '11 at 4:11
This is a biased post. For one, LastPass also encrypts your password before sending it off. On top of that LastPass has an offline mode. LastPass, unlike Firefox, offers versions on all mobile platforms, along with several forms of two factor authentication, which Firefox does not have. – surfasb Aug 16 '11 at 5:49
Also my experience with the LastPass software is not so good -> Care to explain? – Sathya Aug 16 '11 at 6:25
Yes. of course both encrypt the passwords before sending them. And they might be readable from Lastpass webpage in the future. the big difference between the two is that Sync uses firefox password options while Lastpass brings its own software. This own software hasn't been as good in finding the password fields. – anttir Aug 18 '11 at 10:18

Personally, I would use LastPass instead. They offer two factor authentication like smartcards, their grid system, mobile text or USBkey. They also offer one time use passwords (for public logins).

They also offer an offline mode. It's also far easier to use and supports even the funkiest login screens.

Another handy feature is sharing a login without sharing the password.

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .