Re: Master Password & Sync!

[Juwei Huang]

+ autofill team

On Wed, Mar 15, 2017 at 9:59 AM, Juwei Huang <jhu...@mozilla.com> wrote:

+ Joe Cheng (PM of form autofill) for more inputs

Thanks for the feedback!

For Master Password I'll try to contact Peter for more details.

For form autofill sync, I agree with Alex's comments.
Also, I believe that it makes sense to have profile sync checked by default, yet credit card sync should be allowed by users.

On Tue, Mar 14, 2017 at 10:04 AM, Mark Hammond <mham...@mozilla.com> wrote:

On 14/3/17 1:51 am, Ryan Feeley wrote:

*1. Credit card autofill in master password*
According to your suggestion last time, I modified the credit card spec: link <https://mozilla.invisionapp.com/share/7ZA4WEK9W#/215538002_4-1>
I decided to keep it simple, so I put a hyperlink below autofill settings. Users can click on it to setup master password.

However, I probably need a text hint indicate that master password will protect login as well as credit card autofill. Would you give me some suggestion?

Hi Juwei,

Believe it or not, master password has not been touched since I have been at Mozilla (almost 4 years). I think it was not touched for 4 years before that too :(

I know that it is very difficult to change the wording, because master password is also used for personal certificates. That’s why it says “security device”.

This, of course, is very bad.

I would like to change Firefox to behave like other browsers, and use the system keychain for master password functionality (see attached example from Chrome).

While this is only tangentially related, bug 1271851 is "Decouple Master Password from [Password Manager]" - it doesn't have alot of traction, but it shows where Firefox wants to head.

Also related if you squint - Sync doesn't work at all until the master-password is unlocked, so at least there will not be additional issues around syncing payment information which is protected by the master password.

(I'm also inclined to agree with Alex's comments, but I've nothing additional to add there, so I'll let you 2 work out the finer points)

Cheers,

Mark

Who is product manager for this feature? We need to replace Master Password for autofill and many other features. Is it Peter? I’ll cc him.

*2. Form autofill sync*
I've heard from PM that we are planning to sync form autofill in the near future. Regarding UX design, would it be possible to add "profile autofill" & "credit card autofill" in sync?

Possibly. I have cc:ed Sync Product Manager Alex Davis and engineer Mark Hammond.

For us to sync new datatypes, we have to coordinate desktop, android and ios very carefully. Usually we put new items into an existing group.

For example, we could rename “Passwords” to “Passwords & Form Data” and include those types.

As far as wording, should we use “profile”? Firefox uses this word already to mean browsing profiles.

Hopefully we have the right people on this thread now to discuss an engineering approach.

Ryan Feeley
UX, Cloud Services
Mozilla UX
IRC: rfeeley

--

Juwei

--

Juwei