Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

The more specific the better. I'm wondering exactly what algorithms Mozilla uses to encrypt usernames and passwords for Thunderbird accounts. (located in the 'signons.sqlite' file in the 'moz_logins' table)

share|improve this question

Both Thunderbird and Firefox encrypt logins and passwords with 3DES with the key from the key3.db file located in the profile directory, and it encodes the result with base64.

share|improve this answer
    
provided Master Password is being used as per this article – pun Nov 4 '15 at 3:39
    
In fact logins and passwords are encrypted whether or not you set a Master Password. Although it seems that setting it changes the key3.db in some way, but not the logins/passwords that were already saved, at least in my version of Thunderbird (31.5.0). – nyibbang Nov 4 '15 at 9:57
    
Not enough rep to edit my comment, but actually Thunderbird used to allow plain text base64 encoded logins and passwords but it does not support it anymore (since the third version of their signons.sqlite database schema according to their code). More recent versions of Thunderbird use a logins.json file instead of the sqlite database though, and although I don't have a recent enough version to confirm, I believe it still uses the same encryption system. – nyibbang Nov 4 '15 at 10:46

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .