Master password: Difference between revisions

From MozillaZine Knowledge Base
Jump to navigationJump to search
(Added bit about wallet.crypto pref.)
(added comments about using the master password for S/MIME certificates)
Line 1: Line 1:
If you use Thunderbird on a machine and with a profile other users will have access to then you may want to protect all your POP, IMAP and SMTP passwords with a "Master Password".
If you use Thunderbird on a machine and with a profile other users will have access to then you may want to protect all your POP, IMAP and SMTP passwords with a "Master Password".  You will also need to setup a master password if you wish to install S/MIME certificates.


NOTE: This will not prevent other users from reading any mail which is already stored in local folders, but it will prevent them from downloading your new mail and sending mail from your accounts.
NOTE: This will not prevent other users from reading any mail which is already stored in local folders, but it will prevent them from downloading your new mail and sending mail from your accounts.
Line 13: Line 13:
# Enter your password twice and click on OK.
# Enter your password twice and click on OK.


Once you have set your password, you need to tell Thunderbird to use it to encrypt your other passwords.  Unfortunately this can only by done by editing Thunderbird's prefs.js file or [http://texturizer.net/thunderbird/edit.html#user user.js] file and manually adding the line:
Once you have set your master password, if you wish to protect your other passwords, you need to tell Thunderbird to use it to encrypt your other passwords.  Unfortunately this can only by done by editing Thunderbird's prefs.js file or [http://texturizer.net/thunderbird/edit.html#user user.js] file and manually adding the line:
  user_pref("wallet.crypto", true);
  user_pref("wallet.crypto", true);


NOTE: Currently this will not protect any passwords that are already stored in Thunderbird, so once you have set your master password you must clear Thunderbird's password memory.
NOTE: Currently this will not protect any passwords that are already stored in Thunderbird, so once you have set your master password you must clear Thunderbird's password memory.
To do this go back to the "Passwords and Security" section of the Options dialogue, click on "Manage Stored Passwords", then click on "Remove All".
To do this go back to the "Passwords and Security" section of the Options dialogue, click on "Manage Stored Passwords", then click on "Remove All".

Revision as of 19:20, 8 July 2004

If you use Thunderbird on a machine and with a profile other users will have access to then you may want to protect all your POP, IMAP and SMTP passwords with a "Master Password". You will also need to setup a master password if you wish to install S/MIME certificates.

NOTE: This will not prevent other users from reading any mail which is already stored in local folders, but it will prevent them from downloading your new mail and sending mail from your accounts.

To set a Master Password in Thunderbird, follow these steps:

  1. Open the Options dialogue (Tools menu -> Options).
  2. Open the "Advanced" tab.
  3. Expand "Passwords and Security".
  4. Click on "Manage Security Devices...".
  5. Select the "Software Security Device" from the left hand pane.
  6. Click on "Change password".
  7. Enter your password twice and click on OK.

Once you have set your master password, if you wish to protect your other passwords, you need to tell Thunderbird to use it to encrypt your other passwords. Unfortunately this can only by done by editing Thunderbird's prefs.js file or user.js file and manually adding the line:

user_pref("wallet.crypto", true);

NOTE: Currently this will not protect any passwords that are already stored in Thunderbird, so once you have set your master password you must clear Thunderbird's password memory. To do this go back to the "Passwords and Security" section of the Options dialogue, click on "Manage Stored Passwords", then click on "Remove All".