Mozilla Firefox can now secure access to passwords with device credentials

Firefox 127 introduces an optional device sign-in requirement (OS password or biometrics) to access or auto-fill saved passwords, improving protection against unauthorized local or remote users with device access. However, it does not stop information-stealing malware because stored credentials can be decrypted if the key is present locally; Mozilla advises enabling a strong Primary Password to encrypt the password database and harden it against brute force attacks.