Skip to content
Naked Security Naked Security

Firefox Privacy Protection makes website trackers visible

Mozilla has added another privacy tweak to Firefox version 70 - the ability to quickly see how often websites are tracking users.

Mozilla has added another privacy tweak to Firefox version 70 – the ability to quickly see how often websites are tracking users.

The company calls it the Firefox Privacy Protection and users can access it by clicking on the address bar shield icon.

The drop-down itemises different kinds of trackers detected on each site, such as general-purpose third-party trackers (Google Analytics on a news site, say) or cross-site trackers which follow users from site to site.

In our testing, the feature worked well, although users might not notice many trackers being caught if they’ve already set Firefox’s Enhanced Tracking Protection (ETP) to a strict setting.

What it does visibly confirm is how many trackers Firefox now blocks of various types. Users can get an overview of all blocked trackers by clicking ‘show report’ at the bottom of the Enhanced Privacy Protection drop-down box.

Don’t look now

To back up its claim that privacy protection is worth having, the company released figures showing that Firefox had blocked 450 billion cross-site tracking requests since 2 July, shortly after ETP was first introduced.

Since then, that’s risen to 10 billion blocks per day:

Much of this work has been behind the scenes – practically invisible to you – making it so that whenever you use Firefox, the privacy protections are working for you in the background.

Lockwise

The desktop version of Firefox’s built-in password tool, Lockwise, gains the ability to generate a secure password when signing up for a new account. This can also be used to replace a current weak one with a new and more secure one.

Mozilla points out that access to Lockwise can be protected using Apple’s FaceID or Android’s TouchID face recognitions systems.

For anyone who’s wondering, the encryption used with Lockwise is, to quote Mozilla:

  • AES-256-GCM encryption, a tamper-resistant block cipher technology.
  • onepw protocol to sign into Firefox accounts and obtain encryption keys.
  • PBKDF2 and HKDF with SHA-256 to create the encryption key from your Firefox account’s username and password.

Another new Lockwise feature is its integration with Firefox Monitor breach alerts, which now appear alongside the affected account.

On a side note, in a recent test by the German Federal Office for Information Security, Firefox was reportedly the only one of five browsers to be given a pass grade.

None of the features mentioned in this article were part of that assessment but it’s a creditable endorsement by the body that sets security standards in Germany’s public sector.

The latest version also fixes 13 CVE-level security vulnerabilities, two of which were rated ‘critical’.

Mozilla’s full summary of version 70’s new features can be found here.

4 Comments

This is kind of scary; I read about this feature here and go and look in “about:protections” and see that Lockwise has already “23 Passwords stored securely”. The question is how – given I do not have a firefox account?

Is it keylogging what I do with lastpass?

How do I recover these passwords and remove them from Mozilla’s sticky fingers?

You probably have a default settings for storing passwords that saves them automatically. Go to Options – Privacy and Security and check your settings under Logins and Passwords tab. Generally Firefox doesn’t store these saved passwords online so you can just delete them from your PC and that’s all.

In FF70 doing that (Edit, Preferences, Privacy and Security, Logins and Passwords) and clicking on “Saved Passwords” takes you to the Lockwise login – and I do not have a Firefox account (no interest in sync’ing etc.)!
I used (many years ago) to use the FF internal password store – but I cleaned that out after I moved to Lastpass.
The password for the old functionality does not get you into Lockwise.

Comments are closed.

Subscribe to get the latest updates in your inbox.
Which categories are you interested in?