2 factor authentication and Firefox

prime

I thought I would give you all a heads up since 1Password X was just released for Firefox. Firefox now has 2 step authentication for your Firefox account.

https://blog.mozilla.org/services/2018/05/22/two-step-authentication-in-firefox-accounts/

---

1Password Version: Not Provided
Extension Version: Not Provided
OS Version: Not Provided
Sync Type: Not Provided

AGAlumB

Oh nice! Thank you! I've only recently started actually using my Mozilla account since I've been using 1Password X there. Very cool. :chuffed:

wkleem

I have been avoiding accounts syncing. It may be time to reconsider. Does anyone know if Chrome does the same with 2FA and account syncing? My Chrome accounts are a mixture of 2FA on and off. I have never used Mozilla for accounts.

Ben

@wkleem

I haven’t set it up in a while but I’m pretty sure since Chrome uses Google accounts for syncing... if you have 2FA enabled for your Google account it’ll be required to set up Chrome syncing.

Ben

prime

@brenty

Oh nice! Thank you! I've only recently started actually using my Mozilla account since I've been using 1Password X there. Very cool. :chuffed:

Me too and even have it on iOS now too. I’m not happy how new book marks are saved on the iOS version, but it’s still nice.

@wkleem

I have been avoiding accounts syncing. It may be time to reconsider. Does anyone know if Chrome does the same with 2FA and account syncing? My Chrome accounts are a mixture of 2FA on and off. I have never used Mozilla for accounts.

Why have you been avoiding syncing? I just like having the same bookmarks across all of my devices.

wkleem

@prime, I had read somewhere that the sync tools provided by Google and Mozilla were for convenience than for security. I think was in 2013.

Perhaps this is unrelated but it did not inspire confidence:
https://bleepingcomputer.com/news/security/firefox-master-password-system-has-been-poorly-secured-for-the-past-9-years/

Old article:

https://east-tec.com/blog/think-before-you-sync/

prime

@wkleem

I don’t use the master password part, and use this just to sync bookmarks. I use only 1Password for syncing my password, and why I am so happy that 1Password X is works for Firefox. I’ve read a few times that browser password systems are junk.

Here is one article showing how they are junk:
https://www.wired.com/2016/08/browser-password-manager-probably-isnt-enough/

I just read about this issue not to long ago:
https://blog.hackersonlineclub.com/2018/05/new-malware-designs-to-grab-data-from.html

So I just sync bookmarks, and leave the password stuff to 1Password.

AGAlumB

Yeah that makes sense. I guess I would just never store anything sensitive as a bookmark, only public sites for convenience. For anything I want to keep secure and private, it's 1Password. :)