15

The Remember passwords option in Tor Browser is greyed out.

In past versions of the Tor Browser Bundle there was a setting in Tor Button, but in v3.5 it's no longer there. How can I store passwords in Tor Browser?

  • 1
    Remember, exit nodes can often read passwords you are sending if you are logging into a non https site. In general its also not best to edit your tor browser, as it can lead to a unique fingerprint for you. I would imagine if you would need to change the firefox back to normal firefox, by deleting it from the tor folder and putting in a new one. however this may not work, and even if it does, it is HIGHLY not recommended. Just write the passwords somewhere else. This isn't something you should be doing. – puser Feb 3 '14 at 14:47
  • 1
    No one knows the answer? Am I the only one being disturbed by this? So what do you do? Remember all passwords? Use always the same trivial passwords for unimportant sites? Always copy and paste your passwords? – user1055 Feb 19 '14 at 10:25
  • Fearing browser fingerprinting is greatly exaggerated here. Only if you change settings, that servers can notice, you change your browser fingerprint. Whether you store passwords using Firefox's local store password mechanism or not, I would wonder if servers can detect this, since it's a local feature. – user1055 Jun 9 '14 at 9:15
  • 1
    @user1055 I understand you want a "straight answer" but, if you're using TOR, you should already kind of understand that maybe you shouldn't be storing passwords in the browser. Anon did not "miss the topic", in fact they have the right idea. Instead of keeping passwords in a place where, if someone were to open up your tor browser, they will NOT ONLY be able to look at the history (because it was enabled), but now they will have automatic password completion...good job. I use the same "generator/expiration" method with a micro, waterproof flash drive encrypted with veracrypt on a quick-releas – user14587 Oct 3 '16 at 5:22
  • Given that keepass support on Linux is crap and I use FF / tor in the first place for cross platform compatibility, what are the alternatives? – user447607 Mar 8 '17 at 14:31
15

Go to privacy setting and change the history setting to "remember history" and then "remember passwords for sites" will no longer be greyed out.

  • Yes! This is the right answer! I wonder how it's possible that a totally offtopic answer it's the most voted one... – Magnetic_dud Jul 10 '14 at 18:43
  • Note that the option "remember logins" is under the "security" options, not "privacy". (version 7.0.5) – adam.r Sep 12 '17 at 19:16
3

I don't store my passwords in my browsers.

I generate unique random passwords for every site.

I get an expire date for that password 90 days from today

I write that down in a key value pair in a plain text file.

  • domain-name userid random password expire-date
  • application userid random password expire-date
  • reminder userid random password expire-date

If I ever visit this file and today after the expire-date of the password I am getting, I generate a new random password to replace the old one.

I encrypt that file with PGP, I store that file on an encrypted removable drive.

  • 3
    There are password managers like KeePass which automate this procedure and possibly make the plain-text password exposure smaller but of course being a more complex software make them to be more prone to security bugs or backdoors. – pabouk May 27 '14 at 10:57
  • 2
    Please delete this answer. The question is " How to store passwords in Tor Browser?" and your answer starts with "I don't store my passwords in my browsers." Missed the topic. – user1055 Jun 9 '14 at 9:13
0

may I tell you what? You do not got all pale on the fence!

This absolute everytime the same bullshit blabla. Then do it so: Focre a masterpassword, all passwords are encrypted till masterpassword is entered, masterpassword clears down after 5, 10 Minutes or something like this. Change the behavior so, that you can use private mode further.

This kindergarden fear that anybody could deanonymous you, if you change 1 setting that tros developers prepard.

Did they tell you, that in private mode all windows share cookies? That cookies are fully acepted for the session, but not shown in the CM? No, they did not.. Why?

Having a secured, encrypted password store in the browser, will not conflict with anonymousity. Why it should?

It must be a high priority task for the tro browser developers to add a really secure password manager inside tor browser. End of discussion. If you got seized, you need to click only one X and all is off. No, with the paranoid, world strangered ideas of the tor browser people, you should then close keypass also...

Totally nonsense!

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.