I am not sure if having the possiblity to show all passwords that easily is a good idea at all: I have just read an online review of Fx3 by German news magazine "Spiegel" which they did in conjunction with interviewing Mitchell, and they call it a "bad joke" because it is an invitation for people to use just seconds of a user not monitoring their computer to gain convenient access to all their passwords. While I agree that keeping your computer locked etc etc. is a obligation for the user, and not Firefox's, I think a user should be able to allow a friend to "quickly check their emails" without fearing that the "friend" gets convenient access to all their passwords in a second or two. One way around would maybe requiring a master password to be set (and entered) before the "show all passwords" button works? The password should be asked for even if it was entered once before in this session obviously, otherwise it doesn't mitigate the problem I am describing here.