diff --git a/Optional-Hardening.md b/Optional-Hardening.md index 4f9f668..63a0a2d 100644 --- a/Optional-Hardening.md +++ b/Optional-Hardening.md @@ -27,6 +27,21 @@ user_pref("browser.firefox-view.feature-tour", "{\"screen\":\"\",\"complete\":tr *** +### Password management across devices +If you use a password manager, disable saving passwords, credit cards, and addresses. + +We recommend using [Bitwarden](https://addons.mozilla.org/en-US/firefox/addon/bitwarden-password-manager/) or [1Password](https://addons.mozilla.org/en-US/firefox/addon/1password-x-password-manager) to manage your credentials on multiple devices. +```javascript +// PREF: disable password manager +user_pref("signon.rememberSignons", false); + +// PREF: disable address and credit card manager +user_pref("extensions.formautofill.addresses.enabled", false); +user_pref("extensions.formautofill.creditCards.enabled", false); +``` + +*** + ### Public Key Pinning [Public Key Pinning](https://wiki.mozilla.org/SecurityEngineering/Public_Key_Pinning) (PKP) is a tool that boosts the safety of [SSL certificates](https://www.cloudflare.com/learning/ssl/what-is-an-ssl-certificate/) by linking a website to its unique security key. This process ensures that the website you're visiting is real and not fake. PKP stops any attempts to trick your computer into connecting with a fraudulent website.