The Mozilla Foundation today released a new version of Lockbox. For those who don't know, it's an extension that acts as a password manager for Firefox versions and replaces the browser's built-in password manager when installed.
The Mozilla foundation calls Lockbox an experiment to “test and improve password management as well as internet security.”
Lockbox is considered secure, as it offers “newer encryption” according to the Mozilla foundation. Lockbox uses AES256-GCM encryption as well as HMAC SHA-256″ to destroy stored data so they cannot be retrieved”.
Lockbox is currently available as an alpha version. This means it has several limitations that you should be aware of before installing the extension.
Initially there is no password import functionality from Firefox or other password management applications.
The extension does not yet have any password export functionality, but synchronization between different Firefox installations is supported and Firefox Sync appears to work.
According to the above, it would be advisable not to use the extension yet, as the alpha version makes it unsuitable for production environments.
If you still install it, the first thing you should do is log into your Firefox account.
The extension displays three core functions: adding connection information, opening all saved passwords from the toolbar icon, and copying data from your Firefox account.
The functionality is quite limited at the moment, but it seems like a good idea from the Mozilla foundation.
Of course the question still applies:
