[h1d]

It's obvious browser password managers are broken in a way it never locks its database, so anyone with physical access can log in to all the site you have passwords for, which also means changing password is easy as logging into your gmail also requires no knowledge.

To this day I can't believe none of the browsers actually try to fix this by at least locking the password database after a certain period like any password managers do. Safari at least disallows you from looking at the list of sites you have passwords for by requiring you to enter your account password but never asks you anything at each site's login.

For this reason, I never use browser based password managers.

[ghostly_s]

You can protect your password DB with a master password on Firefox, though it only will be 'locked' when you close the program. AFAIK this is not too dissimilar from the model for most password managers.