diff --git a/Optional-Hardening.md b/Optional-Hardening.md index 9be0940..9bc2501 100644 --- a/Optional-Hardening.md +++ b/Optional-Hardening.md @@ -28,13 +28,23 @@ user_pref("browser.firefox-view.feature-tour", "{\"screen\":\"\",\"complete\":tr *** ### Password management across devices -If you use a password manager, disable saving passwords, credit cards, and addresses. +:bulb: We recommend using [Bitwarden](https://addons.mozilla.org/en-US/firefox/addon/bitwarden-password-manager/) to manage your credentials on multiple devices. + +#### Logins & passwords +Disable saving passwords if you use a password manager. + +* `☰` *→ Settings → Privacy & Security → Logins and Passwords → Ask to save logins and passwords for websites* -We recommend using [Bitwarden](https://addons.mozilla.org/en-US/firefox/addon/bitwarden-password-manager/) or [1Password](https://addons.mozilla.org/en-US/firefox/addon/1password-x-password-manager) to manage your credentials on multiple devices. ```javascript // PREF: disable password manager user_pref("signon.rememberSignons", false); +``` +#### Address & credit card +The same for credit cards and addresses. + +* `☰` *→ Settings → Privacy & Security → Forms and Autofill* +```javascript // PREF: disable address and credit card manager user_pref("extensions.formautofill.addresses.enabled", false); user_pref("extensions.formautofill.creditCards.enabled", false); @@ -61,6 +71,8 @@ To add to your overrides, choose between two options below. #### Option 1: Private windows only Firefox will get explicit permission from you before connecting to a site insecurely in [Private Browsing](https://support.mozilla.org/en-US/kb/private-browsing-use-firefox-without-history) (Firefox [incognito mode](https://support.mozilla.org/en-US/kb/common-myths-about-private-browsing)). + +* `☰` *→ Settings → Privacy & Security → HTTPS-Only Mode → Enable HTTPS-Only Mode in private windows only* ```javascript // PREF: enable HTTPS-Only Mode // Warn me before loading sites that don't support HTTPS @@ -71,6 +83,8 @@ user_pref("dom.security.https_only_mode_error_page_user_suggestions", true); #### Option 2: All windows Firefox will get explicit permission from you before connecting to a site insecurely in Normal and Private Browsing. + +* `☰` *→ Settings → Privacy & Security → HTTPS-Only Mode → Enable HTTPS-Only Mode in all windows* ```javascript // PREF: enable HTTPS-Only Mode // Warn me before loading sites that don't support HTTPS