[bakhy]

This is quite easy to reproduce. Wow.

IMO they should just remove the password generator feature. It's barely usable, and with this behavior it's just dangerous.

Why barely usable? Some really simple features are missing. I miss the ability to specify password requirements - for annoying sites which specify length, require so and so many these and those types of characters, or even forbid some types. And another one is that it's not possible to manually generate a password, not even in the password storage UI, when manually adding a new entry. So, if a site did not correctly declare a password field, which happens, you must generate a password yourself somehow.

[weird-eye-issue]

> This is quite easy to reproduce. Wow.

If you read the page you would see it is functioning by design and the bug was closed 3 years ago. Not saying that is the proper behavior, but that would explain why you can reproduce it.

[amelius]

I use the feature all the time, and I'm happy with it. Please don't remove it.

[haasted]

Why do you find the feature "barely usable"?

[Ayesh]

It is a hit or miss, as some password fields don't get this. However, I personally fund it useful and use it about 100/% of the time in new signups/resets when available.

[mnoorenberghe]

I believe you can right click in any type=password field to bring it up with the heuristics didn’t detect it as a new password field.

[riskable]

Yeah that's the problem though: A lot of websites don't set the password field to "type=password" or they don't set the second (verify) password field like that. Why do they do this? Either the web developer didn't really know what they were doing or they were given some very unique requirements (e.g. need to work with a legacy framework).

[richardwhiuk]

Password is leaked. Firefox continues to suggest the same password, because there's no random generation.

[kijin]

Wrong. There's random generation, and each randomly generated password is pinned to the site where it was generated. When you navigate to a different site, Firefox will generate a new password. There's no cross-site leaking.

[darkwater]

Password is leaked and you want to change it all in the same browser session/tab since you created it for the 1st time? I mean, technically you could be living with the same tab opened for months but...

[haasted]

I meant in addition to the issue being discussed.

> It's barely usable, and with this behavior it's just dangerous.