Hacking Firefox to Always Auto Save Password Without Showing Notification

Starting from Firefox 5, you may have noticed that editing the nsLoginManagerPrompter.js inside omni.jar file does not work. The Firefox developing team did not fix the bug nor improve the security but instead they optimized it further by making Firefox load a compiled binary version of the nsLoginManagerPrompter.js file instead of the raw and editable JS file. Here is what you need to do to enable auto password saving on Firefox 5 and above. Do take note that the omni.jar file has been renamed to omni.ja starting from Firefox 10.

1. Use WinRAR, PowerArchiver or WinZIP to open the omni.jar or omni.ja file from C:\Program Files\Mozilla Firefox\ folder.

2. Navigate to jsloader\resource\gre\components\ and delete the nsLoginManagerPrompter.js file.

Delete nsLoginManagerPrompter.js

3. Go back to the root of omni.jar or omni.jar, and navigate to components folder. Edit the nsLoginManagerPrompter.js file and replace the whole _showSaveLoginNotification function as shown earlier. Save the changes and go back to the archiver. Click the Yes button when the archiver prompts you to update the archive with the updated file.

If you are having difficulty in following all the steps above, we provide an already modified version of omni.ja file for Windows version of Firefox 21 which can be downloaded by clicking here or click here for Mac OS X. Simply download and save it to C:\Program Files\Mozilla Firefox\ folder in Windows. In Mac OS X, click Go at the Finder toolbar, select Applications, right click on Firefox and select Show Package Contents. Open Contents folder and copy the omni.ja to the MacOS folder. Remember to backup the original omni.ja file in case you want to restore back the changes.

Additional Notes:

1. A potential Firefox default behavior that may cause the user to realize that their username and password has been saved is when they log out and find that their credentials automatically filled in to the textboxes. An easy way to prevent this from happening is by typing about:config in the address box, click on the “I’ll be careful, I promise” button, type signon.autofillForms in the Search box and either double click on it to change the value from true to false or you can right click on it and select Toggle.

signon.autofillforms

2. Whenever Firefox gets a minor or major update, most likely the omni.ja file will be reverted to the original. You’ll need to either re-edit the nsLoginManagerPrompter.js file again or visit this page to download the latest version of the modified omni.ja.

3. This article and research is for educational purposes only. Use it with care and think twice before implementing this illegally as it can get you into a lot of trouble!

68 Comments - Write a Comment

  1. izzy fujiwara 7 years ago
  2. sakti 7 years ago
  3. J 8 years ago
  4. ros 9 years ago
    • Rosebud 9 years ago
  5. test 10 years ago
  6. Spanonymous 10 years ago
  7. Barry 11 years ago
  8. sajeev soni 11 years ago
    • Bill 10 years ago
      • patronus 10 years ago
  9. Taylor 11 years ago
  10. Ziauddin Ahmed 11 years ago
  11. Chand 11 years ago
  12. Ankit ajs 11 years ago
  13. max12 11 years ago
  14. Marius 11 years ago
  15. Lynix 11 years ago
  16. Rachad 11 years ago
  17. Yogesh 12 years ago
  18. stevy 12 years ago
  19. Meikv 12 years ago
  20. Anonymous 13 years ago
  21. charls 13 years ago
  22. Ram Agarwal 13 years ago
  23. Jasmeet Singh 13 years ago
  24. Lue 13 years ago
  25. abc 13 years ago
  26. m4Cc4 13 years ago
  27. M 13 years ago
  28. seekers 13 years ago
  29. dmonteri 14 years ago
  30. Abraham 14 years ago
  31. Tammi 14 years ago
  32. Marianno 14 years ago
  33. joel 14 years ago
  34. ryseque 14 years ago
  35. Hammad 14 years ago
  36. Haris 14 years ago
  37. Eub 14 years ago
  38. aar 14 years ago
  39. fhgy 14 years ago
  40. pankaj 14 years ago
  41. Ekendra 14 years ago
  42. kupo510 14 years ago
  43. shi 14 years ago
  44. Brian 14 years ago
  45. King John 14 years ago
  46. Mary 14 years ago
  47. rod 14 years ago
  48. reggie 14 years ago
  49. 1337 H4ckØR 14 years ago
  50. gabriel 14 years ago
  51. buntugeek 15 years ago
  52. Dick White 15 years ago
  53. lting77 15 years ago
  54. sameer 15 years ago
  55. farazdaq 15 years ago
  56. bullygram 15 years ago
  57. Ahmad 15 years ago
  58. Bnsofts.com 15 years ago
  59. Venkatesh 15 years ago
  60. Ali Jiwani 15 years ago
  61. Danny 15 years ago
  62. ding-dong 15 years ago
  63. Gaurav 15 years ago
  64. Boni 15 years ago
  65. shaheen 15 years ago

Leave a Reply

Your email address will not be published. Required fields are marked *

Note: Your comment is subject to approval. Read our Terms of Use. If you are seeking additional information on this article, please contact us directly.