Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

The more specific the better. I'm wondering exactly what algorithms Mozilla uses to encrypt usernames and passwords for Thunderbird accounts. (located in the 'signons.sqlite' file in the 'moz_logins' table)

share|improve this question

Both Thunderbird and Firefox encrypt logins and passwords with 3DES with the key from the key3.db file located in the profile directory, and it encodes the result with base64.

share|improve this answer
    
provided Master Password is being used as per this article – The_IT_Guy_You_Don't_Like Nov 4 '15 at 3:39
    
In fact logins and passwords are encrypted whether or not you set a Master Password. Although it seems that setting it changes the key3.db in some way, but not the logins/passwords that were already saved, at least in my version of Thunderbird (31.5.0). – NYI.BBang Nov 4 '15 at 9:57
    
Not enough rep to edit my comment, but actually Thunderbird used to allow plain text base64 encoded logins and passwords but it does not support it anymore (since the third version of their signons.sqlite database schema according to their code). More recent versions of Thunderbird use a logins.json file instead of the sqlite database though, and although I don't have a recent enough version to confirm, I believe it still uses the same encryption system. – NYI.BBang Nov 4 '15 at 10:46

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.