Lir3nt.net News

.:Lir3nt.net:.

11/23/07

Reveal your saved Passwords in Firefox

firefox

Many users save their passwords in Firefox so that they do not have to enter it again when visiting the website it was saved for again. Firefox remembers the password and enters it automatically if the user selected this option on his first visit. This is great for us lazy users but poses the problem that we sometimes can’t remember the password when we need it again.

A classic example would be a Gmail user who has been using the Gmail website so far now trying to get the POP3 access running. So, what is this user going to do ? He actually has several options to reveal the password in Firefox. The first that comes to my mind is the ability to go into the security tab of the options. You do find a show passwords button there that displays all passwords, usernames and site urls.

I have written about this before and want to concentrate on other possibilities. Please note that a master password has to be entered for all the following methods if one has been set.

1. Greasemonkey Scripts:

If you are using the excellent Greasemonkey extension you can choose from a wide variety of scripts that reveal the passwords:

Show Password on Click - displays the password if you click the password form.

Show Password onMouseOver - reveals the password if you hover the mouse over the password field.

Unpassword - changes the type of the password form to text which always displays the passwords as text.

2. Javascript Code

Paste the following line of code into the address bar and hit enter to reveal the password on this website.

javascript:(function(){var s,F,j,f,i; s = ""; F = document.forms; for(j=0; j<F.length; ++j) { f = F[j]; for (i=0; i<f.length; ++i) { if (f[i].type.toLowerCase() == "password") s += f[i].value + "\n"; } } if (s) alert("Passwords in forms on this page:\n\n" + s); else alert("There are no passwords in forms on this page.");})();

3. Firefox extension

Unhide Passwords - this extension does basically the same as the Unpassword Greasemonkey script.

[via gHacks]

No comments: