When you tell Firefox to remember your user-name and password to a login service, it encrypts the access credentials and stores them in a database file in your profile directory. Yet, anyone can open Firefox’s password manager and view your secure login credentials.

In order to keep prying eyes out of your login information, one can set a master password to provide an extra layer of privacy. However, if the password is forgotten, there’s no way to recover the lost login credentials.

We’ve recently covered here how to retrieve user names and passwords from Firefox’s built-in Password Manager. In this hack, we introduce a tool to recover the Firefox master password.

FireMaster is an open source utility that lets you recover the Firefox master password. In a nutshell, FireMaster utilizes the same method used by Firefox to verify the master password, but in an optimized way. It uses three password generation methods to generate on-the-fly passwords. For each password, it computes the hash and tries to decrypt an encrypted data of known text. If the decrypted data is as same as the original data, then you got your password…

FireMaster should work with Firefox 1.0 and greater version. Download FireMaster here (source).