Managing your website passwords is always a challenge. Using a dedicated password manager can help, but if you use Firefox on PC and mobile, you can also tap into a feature from Mozilla known as Firefox Lockwise. The Firefox Lockwise app (iOS, Android)—which was briefly known as Firefox Lockbox before a rebrand—grabs the website logins you’ve stored in Firefox and automatically signs you into those sites on an iOS or Android device.
Sounds good, but are your passwords protected, and if so, how? Mozilla says it uses a number of different encryption methods to secure your saved passwords. The browser relies on a tamper-resistant block cipher technology called AES-256-GCM, and uses the onepw protocol to sign into Firefox Accounts and obtain encryption keys. Firefox also uses PBKDF2 and HKDF with SHA-256 to create the encryption key from your Firefox Account username and password.
Here’s how to set up and use Firefox Lockwise.