by Daniel Dawson (Developer) on July 10, 2015 · permalink

Sorry to hear that happened to you. You should seek help at Mozilla Support https://support.mozilla.org/ since Saved Password Editor does not handle storing your passwords. That is the job of Mozilla's Password Manager that is built into Firefox. (That is why this add-on is called Saved Password Editor and not Saved Password Manager, as it provides a few enhancements to what is already there.)

I'm not an expert about it, but from my experience, Refresh Firefox creates a new profile and copies in data from the old one. I've heard of it not always copying everything it should, so maybe that happened to you. Your passwords should still be in the old profile, if you haven't deleted it. Anyway, please go to Mozilla Support https://support.mozilla.org/ for further help about it.

by Daniel Dawson (Developer) on July 6, 2015 · permalink

Please look at the support forum at https://groups.google.com/forum/#!forum/ddawson-addonssupport
In short, SPE has never claimed to fill passwords. That's still left as the job of Firefox, as to do otherwise would turn SPE into a password manager, not a password *editor*. If Firefox doesn't do that properly, you'll need other solutions, one of which I suggest at aforementioned support site.

If you want to complain about this, please complain to Mozilla developers.

by Daniel Dawson (Developer) on June 7, 2015 · permalink

I did have an Android version at one time, but then they changed the browser and broke compatibility, and I didn't have the means to test with the new browser. And by the time I did, there was this add-on: https://addons.mozilla.org/addon/mobile-password-manager/ . It's not mine, but it does provide a password manager interface as well as performing most of the editing functionality that SPE performs on the desktop browsers, though notably absent is editing multiple passwords at once. Try it out, and see if it does the job for you.

If there is sufficient interest, I might either try to convince the MPM author to improve MPM or try to get SPE (or a version of it) to work on mobile. It's just not a priority right now.

by Daniel Dawson (Developer) on May 23, 2015 · permalink

You might consider backing up the files in your profile folder. See https://support.mozilla.org/kb/profiles-where-firefox-stores-user-data
There's also Password Exporter https://addons.mozilla.org/addon/password-exporter/ which hasn't been updated in a long time, so it may or may not work.

I always figure, I didn't build the password manager, so I don't take responsibility for backing it up, especially when solutions already exist. But I hope you find those solutions helpful.

by Daniel Dawson (Developer) on May 9, 2015 · permalink

Where exactly did you download Saved Password Editor? I just tried downloading from AMO (through the "Add to Firefox" button on the main listing page) and comparing to my build. The files are identical, so it's impossible for any malware to have been added there.

If you got the add-on through another site, please note that you should be wary of other sites, especially when the official distribution is here. If you downloaded from here, then it seems either your computer is already infected with something that is manipulating what you receive, or your anti-malware software gave you a false positive (quite possible depending on how it fingerprints malware).

I also would like to point out that you should not feel safe with other Firefox extensions just because their stated purpose doesn't involve handling your passwords. *All* extensions (i.e. add-ons that modify behavior) have full privileges to do anything Firefox itself can do (except for SDK add-ons that do not request such privilege). Having an add-on whose description says nothing about passwords be the one to steal them makes more sense, don't you think? However, the review performed by actual humans (the add-on reviewers) before add-ons are allowed to be publicly released is designed to prevent such a blatant violation.

There are still ways that malware can slip in, though. In the near future (planned for version 41; version 40 will have a preference allowing it to be disabled), Firefox is going to allow only extensions signed by Mozilla to be installed. See https://blog.mozilla.org/addons/2015/02/10/extension-signing-safer-experience/ and https://blog.mozilla.org/addons/2015/04/15/the-case-for-extension-signing/ and https://wiki.mozilla.org/Addons/Extension_Signing for more info. That should significantly reduce such infections, among other things.