Primary password bypass? Secondary windows accessible before password entry
I’m unsure if this is a bug, a feature, or expected behavior:
When using a Primary Password (formerly Master Password), the browser prompts for the password after selecting a profile. During this phase, tabs load in the main window, but the window remains locked until the password is entered. However, if multiple windows were open during the previous session, only the main window is locked. Secondary windows remain fully accessible - allowing navigation and even logging into sites (using saved sessions), without requiring the Primary Password.
Expected Behavior:
I assumed the Primary Password prompt at startup would lock all windows until entry, acting as a security gate for the entire profile (as it does when only one window is open). Is this intentional, or a potential oversight?
To reproduce:
- Settings:
- Enable: General > Startup: Open previous windows and tabs
- Enable: Privacy & Security > Passwords: Use a Primary Password
- Enable: Waterfox - Choose a profile > Manage Profiles: Choose a profile when Waterfox opens
- Open 2+ windows with loaded tabs.
- Force-quit Waterfox (e.g., via Task Manager).
- Restart Waterfox, select your profile.
- When prompted for the Primary Password in the main window, switch to a secondary window - it’s fully usable.