Can Firefox add-ons read your passwords?

ts678 · November 10, 2019, 11:24pm

Welcome to the forum @fredtb

Keeping in mind that you have to grant it permission, I would assume so. The GUI is just a web page.
and Permission request messages for Firefox extensions discusses the sorts of things you can grant.
Below is Duplicati Passphrase source. I don’t think there’s anything special, but I’m not a GUI expert.

github.com

duplicati/duplicati/blob/440b6c91dac0b97b17ec546b475ed48d581d9ed2/Duplicati/Server/webroot/ngax/templates/addoredit.html#L57-L60


      
          <div class="input password" ng-hide="checkGpgAsymmetric() || (Options['encryption-module'] || '').length == 0">
              <label for="passphrase" translate>Passphrase</label>
              <input type="{{ShowPassphrase ? 'text' : 'password'}}" name="passphrase" id="passphrase" ng-model="Options['passphrase']" />
          </div>