logins.json data is added unencrypted, maybe that's why people have problems with saved login data

install TB disable always private surfing enable saving login data open a page with login form, logon and accept saving login data data is being added to logins.json in unencrypted form so far all seems right, but you will not be able to USE the saved logins

go options again, set master pass, apply add another login (go logon somewhere and save) data is STILL being added to logins.json in UNENCRYPTED form (and unencrypted is not being encrypted) STILL not able to use the saved data

copy over old logins.json and key4.db voila, you can use it... again try to add a new login to the old data -> same as 1) and 2) applies

implies the mechanism is broken i can not find a fix

Trac:
Username: sashaman

added component::applications/tor browser owner::tbb-team priority::medium reporter::sashaman severity::normal status::new type::defect labels

Trac:
Summary: logins.json data is added unencrypted, maybe thats why peolpe have problems with saved login data to logins.json data is added unencrypted, maybe that's why people have problems with saved login data

re 1): if TB asks you if you want to save a password and you confirm, then the added pass will NOT show up in the password list inside TB's options and TB will not be able to use it. if you look inside logins.json the login data was added tho... weird behaviour

Trac:
Username: sashaman

Hm, I wonder whether that's related to our security.nocertdb setting which causes of surprise behavior once writing things to disk using things written to disk gets enabled...

Trac:
Priority: High to Medium
Severity: Major to Normal
Cc: N/A to mcs, brade
Keywords: encryption, torbrowser, logins.json, cipher, decryption, tbb-8.0-issues, error deleted, N/A added

Is there any solution to this problem?

Trac:
Username: Nescoffe

mentioned in issue #30565 (moved)

mentioned in issue #30685 (moved)

moved to tpo/applications/tor-browser#30209

mentioned in issue tpo/applications/tor-browser#30685 (closed)