Import Safari logins/passwords (from macOS Keychain)
Categories
(Firefox :: Migration, enhancement, P2)
Tracking
()
People
(Reporter: MattN, Unassigned)
References
Details
(Whiteboard: [fxgrowth] [fxprivacy] [passwords:import])
User Story
As a new user of Firefox, I'd like to be able to access the passwords I have saved while previously using Safari/Chrome on OS X.
Updated•10 years ago
|
Updated•10 years ago
|
Reporter | ||
Comment 2•9 years ago
|
||
Reporter | ||
Updated•9 years ago
|
Updated•9 years ago
|
Updated•9 years ago
|
Updated•9 years ago
|
Comment 3•9 years ago
|
||
Comment 4•7 years ago
|
||
Reporter | ||
Comment 5•7 years ago
|
||
Comment 6•7 years ago
|
||
Reporter | ||
Comment 7•7 years ago
|
||
Comment 8•7 years ago
|
||
Comment 9•7 years ago
|
||
Comment 10•7 years ago
|
||
Comment 11•6 years ago
|
||
Reporter | ||
Comment 12•4 years ago
|
||
I looked into this again recently and it seems like we would require the "Automation" (or "Accessibility") permission on macOS in order to automate the macOS password re-authentication dialog for the user e.g. https://gist.github.com/rmondello/b933231b1fcc83a7db0b. This means we would have to ask the user for their macOS password in order to populate the macOS dialog for them for each password. The user would see this process play out quickly in front of their eyes so it would be kinda dirty.
It's possible we could bypass all APIs and instead read from the Keychain file directly but I don't know how the key is derived, how stable the file format is, or what file format/encoding is used. This would probably require the Full Disk Access permission but we already need that for Safari bookmark/history import anyways.
Updated•4 years ago
|
Reporter | ||
Updated•4 years ago
|
Reporter | ||
Comment 13•4 years ago
|
||
There is proof-of-concept code that works with the newer Safari/iCloud KeyChain storage but not if a T1 or T2 chip is in the machine: https://github.com/n0fate/iChainbreaker
Comment 14•3 years ago
|
||
Any update on this topic ?
Description
•