Passwords and saving them

Tor Browser disables writing certdb (intermediate certificates) to disk. This also affects saved passwords. Unfortunately, the corresponding UI elements for passwords has not been removed and makes things confusing

We realize that this is a friction point, and would like to sometimes relax saving to disk when the user opts into it - this being one example we are exploring - but it gets a little complicated since we want passwords but not intermediate certificates

Here’s some notes about it, it’s about Mullvad Browser, but also applies to TB where we want less friction in both browsers (MB is a good and willing guinea pig for these sorts of things)

What is blocking anything passwords-wise from UI working is the fact that certdb is memory only. You can change this with a pref, but it is not recommended

use at your own risk (note the restart)

/* disable intermediate certificate caching [FF41+] [RESTART]
 * [NOTE] This affects login/cert/key dbs. The effect is all credentials are session-only.
 * Saved logins and passwords are not available. Reset the pref and restart to return them ***/
   // user_pref("security.nocertdb", true);
7 Likes