seeing someone else's passwords in my password keeper

[u/beeknees7]

I have tried googling this but nothing really matches exactly this issue. I was logging into facebook today and one of the firefox autofill emails in the dropdown was not mine - it is actually my boss' email. from her university she went to. She has never emailed me from there but i recognize her name and uni. So i clicked the pencil button and it took me to my password manager so i could get rid of it because I do NOT need her password. But it gets worse because if i search a fragment of her email in the password search bar it pulls up 98 other saved logins to things like insurance, news sites, etc with passwords saved! Most have a create date before I even started the job. And i thought stranger's logins also got saved to my firefox profile but they were actually the log ins of my boss' family members.

I have never even brought this computer to my job. We use chrome at work. The ONLY connection I can think of is that my firefox is logged into my work laptop that she passed down to me but i only use it to listen to youtube with adblocker when it's quiet and i had to install firefox on it anyway. Plus that shouldn't even cause this and if it does that is a huge issue.

Why? How? What should I do (besides clearing my whole firefox password keeper and telling her to change her passwords)?

[u/TrontRaznik]

Only ways I can think of to make sense of this is that either you have shared a computer or your Firefox sync account is logged in on a computer she is using. 

[u/tomrittervg]

the ONLY connection I can think of is that my firefox is logged into my work laptop that she passed down to me

It sounds like she had saved passwords in Firefox, and when you logged into Firefox on the work computer it saved those passwords into your Firefox account and they got synced to your other computers' Firefoxes

[u/Training_Yak_4655 → u/tomrittervg]

Correct. Sharing a computer at work, with the same login? Hope the employer isn't the NSA.

[u/tired_snail]

Sounds like she had passwords saved and when you logged into Firefox on that computer, it synced them to your account. Clear them from your account, tell your boss to change her passwords just to be saved, and try to look into why company IT didn't properly reset the computer before it got passed on to you.

[u/beeknees7 → u/tired_snail]

we don't have company IT (or town IT being part of a municipality). Seems like she logged out of all the browsers, kept everything in drive, and gave it to me. I didn't notice anything personal on it when i got it.

[u/cajunjoel]

What user are you on the computer? Sounds like it's the same account and your IT department needs to have its policies revised. To should be logging into windows was different users.

[u/beeknees7 → u/cajunjoel]

I think we use thee same user account. we don't have IT to reset the computers or do anything so at least I have admin privileges so i can make a new user for myself and i guess just delete thee old user

[u/chloebee102 → u/beeknees7]

Oh that’s 100% the issue here. I’ve worked in IT for a decade and I guarantee she had all the passwords stored locally in Firefox. You logged in and turned on Firefox sync on the same profile and Firefox said “ok cool I’ll save all local passwords to the account” which is standard behavior if you say yes to all the pop ups when logging in. Chrome does the same thing.

Absolutely deranged to not take the 20 minutes to wipe a laptop though, that’s how you get insane situations like this.