passfox by M1lk-S0up

passfox connects Firefox to <a href="https://www.passwordstore.org/">pass</a>, the standard unix password manager, so your gpg-encrypted password store works like Firefox's own saved logins.

<b>What it does</b>
<ul>
<li><b>Fill:</b> click a login field to get a dropdown of matching logins from your store; pick one (or use the arrow keys and Enter) to fill the username and password.</li>
<li><b>Save and update:</b> after you sign in with a new or changed password, passfox offers to save it to your store, in a panel under its toolbar button.</li>
<li><b>Generate:</b> on sign-up and change-password forms, "Use a Securely Generated Password" creates one with <code>pass generate</code>, with your own pass settings.</li>
<li><b>Two-step codes:</b> one-time code fields get a dropdown of the site's codes, filled from <code>pass otp</code> (pass-otp).</li>
<li><b>Manage:</b> Firefox's own passwords page, running on your pass store: search, edit, add and remove logins.</li>
<li><b>Toolbar panel:</b> lists the current site's logins, with copy buttons (passwords are copied by pass, which clears the clipboard again) and a searchable list of your whole store.</li>
</ul>

The dropdown and save prompt are built from Firefox's own design system (its design tokens, icons and component styles, MPL-2.0), so they look at home in Firefox.

<b>Requirements</b>
passfox needs <code>pass</code>, <code>gpg</code>, Python 3 (and pass-otp for one-time codes) and a small native helper that runs <code>pass</code> on your computer. Install the helper once with <code>install.sh</code> from <a href="https://github.com/AuthenticSm1les/passfox">the GitHub repository</a> (Linux and other unix-like systems). Entries are matched to sites by name, with a pattern you set in passfox's preferences, such as <code>{url}/{username}</code> (the default) or <code>www/{url}/{username}</code> for <code>www/example.com/alex@email.com</code>.

<b>Privacy</b>
passfox turns off Firefox's own "Ask to save passwords" while it's installed (that's what the privacy permission is for), so you aren't asked twice; Firefox restores it if passfox is removed. passfox collects no data and makes no network requests. Passwords are decrypted only when you fill, copy or update a login, by your own gpg-agent, and travel only between Firefox and the local helper.

passfox is an independent project and is not made or endorsed by Mozilla.