Foxmarks v2.5 Has Arrived: Sync Your Passwords and More!


You asked and we listened. Over the past year, we’ve received many requests to sync passwords, especially after Google Browser Sync went offline and recommended Foxmarks. Today, we are are pleased to announce that Foxmarks can do exactly that. This release also includes dozens of other product improvements to make Foxmarks better.

Securely Sync Your Passwords

You can now sync your passwords across your computers. Password sync is 100% optional and is turned off by default. Your passwords are secured by encrypting them before they leave your computer with a PIN that only you know. You can also assign your passwords to sync profiles to keep your personal passwords at home, and your work passwords at the office. Read our original post or view our feature description to learn more about password sync.

To encrypt your passwords, Foxmarks uses the current state of the art AES 256-bit encryption algorithm. AES is a United States government standard and is recommended by National Security Adminstration (NSA) for encrypting classified information. See the AES Wikipedia entry for more details.

AES works by taking data that needs to be encrypted along with a secret PIN of your choosing, and then produces an encrypted result. It is strong enough to virtually guarantee that your encrypted data cannot be decrypted by a third-party, not even Foxmarks. The biggest point of weakness is in the strength of the secret PIN that you choose. Foxmarks recommends that you choose a PIN that is difficult to guess and contains a variety of different characters and numbers.

Other Improvements

Version 2.5 also includes several usability, stability and security enhancements. We’ve made the sync progress dialog (above) much simpler, added status info to the settings dialog (below), and in general made Foxmarks more robust and easy to use.


View status in the settings dialog

Toggle password sync (it’s off by default)

To get this release either wait for the upgrade notice from Firefox, or:

Comments


Congratulations!

I just have one question: Does the key support special characters(on standard US English keyboards or otherwise)?


I was waiting for this. Thank you very much :)


It would be a great feature to also be able to sync an entire profile including extensions so that one could standardize their browsing experience across multiple machines or recover from corruption without any of the hassle.


Yeah, an extension sync wuld be great!


Absolutely stunning. Have just one question. Can i delete all stored passwords on server? Does your privacy policy include assurance as it will be deleted from all the mirrors you have ?

Thanks again for such a great extension.

I am not in US but if you ask me about “future of Foxmarks”, I would say a set of addons to weaves for synchronizing kind of data. So that one can select which server they want for their data. Like i would like to keep all passwords on foxmarks server but all history on local server as bandwidth is expensive.

And one more compliment. Excellent server availability. Really amazing.


I believe extension sync falls pretty clearly outside the intended use of Foxmarks.


I also think this add-on should be standard for Firefox.


I’ve tried the new password sync feature, but find only limited info on this feature (unless I’m blind – please lead me :)

How can I see what passwords are being sync’d and for which websites ?, all I can see are options to ‘delete passwords from the server’

And I assume this interacts with the saved passowrds feature inside Firefox ??

Great bit of SW though, Thanks.

Rob


id like to see a feature added to foxmarks that allows for importing of google bookmark.


Awesome =)


Well – I always used to like this one, but today I tried update/new installation four or five times and it crashed my Firefox completely. I now don’t use it anymore. You must have made one major mistake with the upgrade.

FF 3.0, portable edition

Thanks for the past months, anyhow.


I still get sync-errors, if i activate the password-synchronisation. caschy mentioned this already in beta-versions, but there was no reaction about.

See http://img509.imageshack.us/my.php?image=foxmarkssyncerrorvb9.png


The new features look really cool!

However, as Meks and Bernd, foxmarks crashes firefox on all my machines as soon as it tries to synch (bookmarks).

I have set up a PIN for the password synch features which went fine, but the synchronisation never reaches that point. I have tried without any other extensions but it did not change the outcome.

firefox3.0.3, Slackware (12, 12.1 and current)


Crashes the firefox completely each time I try to add password encryption. It opens “create new pin” and crashes right away.

3.0.1, RHE 5.2


@Bernd: same error here – have reported it to the Betateam many weeks ago…


Hi everyone,

Thank you all for the kind words, we’re glad to see that you are enjoying the feature! We think the ideas to sync more of the Firefox profile are great, and will certainly consider adding such functionality to Foxmarks in the future.

There have been lots of comments and questions on the blog over the past few hours and I have tried to address them all below. If you would like to discuss a topic in greater detail, please start a thread for it on our user forums (this makes it easier for other users to search for issues and join the conversation).

Crashing Problems

Several of you have reported crashes. From what we can tell, this only affects Linux users (it has something to do with the Firefox build for Linux). We are working diligently to fix or find a solid work-around for this problem, and will be following up on our progress in this thread on our user forums. If you are experiencing crashes and aren’t running Linux, please let us know in the same thread!

Privacy and Deleting Passwords

@Jigar Shah: Yes you can delete all your passwords from our server at any time. To delete your passwords, go to “Tools > Foxmarks > Foxmarks Settings…”, selected the “Sync” tab and click the button labeled “Delete Passwords from Server”. In fact, you can see this button in the bottom right screenshot above.

When you pick this option, we remove all your passwords from our databases immediately. We take your privacy seriously and will not keep your passwords on our servers after you tell us to delete them.

Other Questions

@Nobu: Yes, passwords with special and non-English characters are supported. (Thanks for the kind words, you were one of the first responders as always!)

@Rob: Yes you’re right, secure Password Sync works with the Password Manager within Firefox. Password Sync synchronizes all the passwords that are stored in the Password Manager (except for your PIN). Here are some instructions on how to access the Password Manager in Firefox and view the list of passwords that you have.


Hi.

V.2.5 crashes with Firefox 3.0.3 in my Linux PC.
Works fine with Firefox 3.0.3 on Windows :-/

Hope this is fixed soon – FoxMarks is installed on ALL my PC’s, both work and private ;-)

Keep up the good work!


Password sync sounded like a great idea so I installed it……but I don’t see that it is working. I turned it on in the Foxmarks settings but it never asks to save a password. Does this work in conjunction with the Firefox password saving feature…..do I have to turn that on also?

How do I get this to work??

Thanks.


foxmarks 2.5 crashes firefox 3.0.3 invariably as it tries to sync.
About firefox gives: Mozilla/5.0 (X11; U; Linux i686 (x86_64); en-US; rv:1.9.0.3) Gecko/2008092416 Firefox/3.0.3


Excellent!
I was waiting for this.

;-)

GLTA


This is a great add-on!
However, the new version 2.5 keeps on crashing firefox.

about: Mozilla/5.0 (X11; U; Linux i686 (x86_64); en-US; rv:1.9.0.2) Gecko/2008091618 Firefox/3.0.2
CentOS release 5.2, 2.6.18-92.1.13.el5


I’ve been using a private WebDAV server sucessfully with the previous version of foxmarks. With this recent update the URI to my WebDAV server is gone when I look at the foxmarks advanced config panel. Any idea where it went?


Well, I installed it on one machine and sync’ed the passwords, but when I installed it on my other two machines, syncing the passwords never returns. Seems to be stuck and can’t synch. Is there a bug reporting system for foxmarks? Hmmm… I guess I need to look for it.


Thank U!!!!


I also have been having Firefox crashes from the Foxmarks plugin on Linux. Loading the Google page crashes within 30 seconds of startup, on restart it happens again. Disabling foxmarks stops the crashing.


@Randy: Yes, from what I can tell it works with the built-in FIrefox password function; I believe it takes Firefox’s password file, encrypts it, then sends it to the server.

As for enabling it, be sure to enable “Remember passwords for sites” in the “Security” section of Firefox’s preferences and also remember that if you disabled remembering passwords for specific sites that you will have to go into “Exceptions…” and remove any sites that you *want* to save passwords for.

Firefox’s official help on the subject: http://support.mozilla.com/en-US/kb/Remembering+passwords


Under x86_64 gentoo linux this causes FF 3.0.3 to crash on every attempt to sync. I had to disable the addin because of that. Is the previous version still available?


On my x64_64 gentoo Firefox 3.0.3 crashes when I try to enable the password sync (at the “enter pin” page).


I’m having problems with Foxmarks 2.5 causing the toolbars to disappear in FF 3.03 on Windows XP SP3. Resetting toolbars in FF safemode does not solve the problem, but disabling FM does.

Works great on the FF Mac version, however.


Foxmarks has been an indispensable utility for me for the last several months. Now with the addition of password sync it only got better.

Another feature that i would really like to have is a note taking utility which has sync feature. Today there are utilities like Evernote that i use but it needs a separate install and it’s also bloated. If you guys can pull one together this will be the ultimate plugin for Firefox.


Forgot to mention in my two posts above: FF also crashes when Foxmarks tries to sync my bookmarks.
Btw. I use the precompiled Firefox from the Gentoo Portage ie. www-client/mozilla-firefox-bin


“Btw. I use the precompiled Firefox from the Gentoo Portage ie. www-client/mozilla-firefox-bin”

Same here, and same result…


Password sync does not work. Worked fine on home machine, but never competes pw sync on office machine. Bookmarks sync perfectly!

Please help!


Add syncing of History and Cookies and you have filled the spot left by Google Browser sync. Keep up the good work


Check out this new blog post that addresses the two issues that many of the comments above are about: (a) Linux Firefox crashes, and (b) hanging during sync.

Regarding the other questions:

@will fiveash: Thanks for the report. We’ll try to reproduce this issue on our end. Was the “Use your own server” setting still checked?

@Greg: That’s odd indeed! Disappearing toolbars may be caused due to a clash with another add-on. Try disabling all add-ons except for Foxmarks and see if you can still reproduce this problem.

@Bill and @kae: Looks like you’re experiencing the second bug mentioned above. Could you please post your Javascript console log on the forums? Instructions are available through the blog link above.


This is painfully beautiful. Some days I get reminded of what an exciting place the internet used to be: this is one of those. Having synchronized bookmarks even on my iPhone..? Awesome.

Great job.

Thanks.


Just to note: I have not yet experienced the crash reported by others using Linux.

I’m using Ubuntu 8.10 (Intrepid) and Firefox 3.0.3 (Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.0.3) Gecko/2008101315 Ubuntu/8.10 (intrepid) Firefox/3.0.3)

I did receive an error about not being able to contact the server, but I was able to manually sync successfully afterward, and it has not given an error since then.


Greg,

I have seen similar with Foxmarks 2.5 and before that 2.2.28. Do you see only the Firefox buttons in the Toolbar Customize… dialog box and not buttons from other extensions?

I uninstalled Foxmarks. Afterward, I reset and reconfigured my toolbar, then reinstalled Foxmarks. You will have to go through the Foxmarks setup wizard, again, but everything was fine after that.


same message as bernd, on any sync, both bookmarks synch and password sync:
http://img509.imageshack.us/my.php?image=foxmarkssyncerrorvb9.png

so, i have automatic sync deactivated. :(


Without Foxmarks Password Sync, I already have a master password for Firefox to retain my passwords.

What is the relationship if any to the Firefox kept passwords with master password and Foxmarks Password Sync?

i want to understand before I try Foxmarks Password Sync.


@will fiveash: Thanks for the report. We’ll try to reproduce this issue on our end. Was the “Use your own server” setting still checked?

Yes, the “Use your own server” was checked but the place where the existing bookmarks server URI should have been was blank.


Foxmarks team, great job!

You make my life better.

A suggestion for the future: a total firefox sync – extensions, settings, sessions, history, cookies, everything. That would be brilliant. I would pay for that. Combined with a good document storage (dropbox?) it would be a step toward hardware and location independent computing.

Thanks again.
And keep up the good work.


guarav & Wildcatray…

Thanks for the tips. Problem is solved. Started up FF in safemode and disabled all addons. Restarted FF then enabled just Foxmarks and restarted again.

Then enabled each additional extension in turn one by one. Everything worked at the end of that process.

There must be something to the order in which the extensions were registered (in the rdf?).

Now all is working. Thanks for the help. And thanks for a great product.


I have found the message http://img509.imageshack.us/my.php?image=foxmarkssyncerrorvb9.png only comes up if i sync passwords too.
Deactivate password sync an sync bookmarks only: it works without any message.
What’s wrong???


We may need to install or update Foxmarks by itself meaning no other extensions being installed or updated along with Foxmarks. Alternately, uninstall the old Foxmarks before installing the new version. (Shrugs shoulders.)

guarav & Wildcatray…

Thanks for the tips. Problem is solved. Started up FF in safemode and disabled all addons. Restarted FF then enabled just Foxmarks and restarted again.

Then enabled each additional extension in turn one by one. Everything worked at the end of that process.

There must be something to the order in which the extensions were registered (in the rdf?).

Now all is working. Thanks for the help. And thanks for a great product.


@bernd, @caschy and @Tom: That message by itself isn’t an error. You’ll see it if you perform an “Upload” or “Delete Passwords From Server” on another computer. If you’re seeing it happen in other cases, then we’ll certainly look into it. Could you describe what caused it to happen? Are you using your own server by any chance? If so, then this is a known issue that we’re looking into. If not, then we need more info from you.

@Paul: The passwords that Firefox stores and are protected by the master password are the same passwords that Foxmarks syncs. Or in other words, Foxmarks syncs the contents of the Firefox Password Manager between your computers. Hope that helps answer your question!

@will fiveash: Thanks for the update! I’ve filed a ticket and we’re looking into the problem. For now, I advise re-entering your server URL so that you can get back to syncing.

@WildcatRay: Thank you for the help and proposed solution! It’s good to know that there’s a workaround for people – but I just wanted to let you and Greg know that we’re looking into this as well.


I’m experiencing the sync error on a second desktop/profile when trying to enable password sync. I’m typing up an e-mail for support at the moment on the subject.

I’ve also noticed that none of the passwords synchronized from my first desktop/profile are showing up on my.foxmarks.com in sync profiles’ config (They are still in Firefox, so I know they aren’t gone completely).

Looking forward to getting this resolved. ^.^


@Nobu: Thank you for your detailed help in the support queue. I just responded to your email there.


@gaurav:
Yes, i use my own server. Bookmark sync works fine like previous versions. Only if i want to sync passwords i see the message.


Damn it! Foxmarks is getting a Foxsync. =)

I love it. Thank you for creating that excellent addon! I look forward your future updates that let me sync more than bookmarks and passwords.

For those who can’t wait until that time (like me ;) ) I can suggest to try FEBE (https://addons.mozilla.org/en-US/firefox/addon/2109). Some kind of sync via USB stick, actually it’s a backup addon. I like it, however.

So, thanks again. Foxmarks rockz!

Best regards from Hamburg, Germany.
Arvid


I cant seem to sync my bookmarks since I downloaded the new version, is there any way to go back to the old one? Are you guys working on this? should I re-download it? Help.

Other then that… I love the portability of my bookmarks!


Newest test version(2.5.3) has fixed the hang on password sync for me. I’ve also gotten my passwords successfully onto the server.

Since it had somehow failed before, I ended up removing my passwords from the server. After which I just enabled password sync again and everything was there.

Thanks for your support. ^.^


I’m having trouble syncing now; passwords again, I think.

If I click synchronize now, bookmark sync seems to be successful but password sync fails.

I get the following error in my log file:

[2008-10-17 18:12:29] —— Foxmarks/2.5.3 (/Places) starting sync with sync.foxmarks.com ——
[2008-10-17 18:12:29] Using Baseline Cache.
[2008-10-17 18:12:29] >>> POST https://sync.foxmarks.com/sync/bookmarks/getchanges
[2008-10-17 18:12:29] >>> Body is: (disabled)
[2008-10-17 18:12:30] >>> Callback
[2008-10-17 18:12:31] lcs = 0 scs = 0
[2008-10-17 18:12:31] Using Baseline Cache.
[2008-10-17 18:12:31] >>> POST https://sync.foxmarks.com/sync/passwords/getchanges
[2008-10-17 18:12:31] >>> Body is: (disabled)
[2008-10-17 18:12:32] >>> Callback
[2008-10-17 18:12:33] Yikes! Length was 9 but is now 6
[2008-10-17 18:12:33] lcs = 1 scs = 0
[2008-10-17 18:12:33] >>> POST https://sync.foxmarks.com/sync/passwords/putchanges
[2008-10-17 18:12:33] >>> Body is: (disabled)
[2008-10-17 18:12:33] >>> Callback
[2008-10-17 18:12:33] Returned error: Bad request(400)
[2008-10-17 18:12:33] Will retry at Fri Oct 17 2008 19:12:46 GMT-0500 (CDT)
[2008-10-17 18:12:33] putchanges failed; response is 400


you guys are life savers, i was having problems, this fixed it :)


@Nobu: Hi Nobu, this may be a remnant of the previous issues. To get back into a clean state, try clicking “Download” in the “Advanced” tab in “Foxmarks Settings”. Be warned though, “Download” will cause your local changes since the last sync to be lost.

Thank you again for all your help and patience as we work out the kinks.


More than passwords, what I need to be synced is history, so that visited links will be different color.

I like to participate in mailing lists through web gateways such as GMANE and Nabble. There is only one drawback with using those systems — they don’t keep track of what posts you have already read. In this case I can only rely on visited links being a different color, but that doesn’t work, of course, when working at different computers.


@gaurav: I was afraid of that, which is why I haven’t made a whole lot of changes, so it’s not a huge deal.

You’re welcome, and thanks to you and everyone else who work on the extension. It really is useful and your work is appreciated.


Now we need yet another password to remember. I wonder if I could the account password for this too.
So, the passwords are encrypted and then again with optional connection encryption. Seems secure enough.
Anyway, the bookmarks aren’t stored in encrypted form?


@DarkFader: On your computer they are not encrypted. On the Foxmarks server they are. I believe they are encrypted on the way to the server as well(would make sense to me).

The only time they are not encrypted, if I am correct, is when you access them(e.g.: by inputting your key on your computer to sync and decrypt what you get from the server and merge it with your passwords, then re-encrypt and upload them back to the server)

What I have done is checked remember pin(or whatever it says) when it asks for the PIN in order to sync, and created a master password(in Firefox) to keep that secure. That way I don’t have to remember the pin but it is still secure. I have(although I don’t recommend it) used the same password for my master password as for my pin, but you can be assured that it is very long(well over 10 characters, but something I could easily remember) and has more than just letters. If you’re really worried, you can create a password out of random letters and numbers and write it on a piece of paper and tape it to your desk or the side of your monitor or something, and use that as your master password. ;)


What I meant to say in the second paragraph is, “when they are on your computer or when you are synchronizing them(but only while changes are merged, and only decrypted while on your computer).”


Thank you!!! I love this new add on.


New version 2.5.3, same problem (message above) if using my own server.


Update on toolbar/extension buttons/bookmarks toolbar issue and Foxmarks 2.5.x:

When updating my various browser profiles (6 total: 3 profiles each on 2 computers: 1 each for Trunk (FF 3.1b2pre) and 2 each for FF 3.0.x), if I was updating along with at least 1 other extension, I was more likely to see my toolbar not display its customizations and not see my other extensions’ toolbar buttons in the Customize… dialog box.

It appears that the most convenient work-around for me is to reset my toolbars (in the Customize… dialog) and then restart the browser. (If I did not reset the toolbar before restarting, things were not resolved.)

Then, I could see all my other extensions’ buttons in the Customize… dialog and could configure my toolbars as desired.


rankmaniac
one more thing: rankmania


Really great idea. I appreciate the lengths you’ve gone to make sure password syncing is secure and explaining that to users, however there is one concern I don’t see addressed. If you encrypt every password with the pin, and then associate it with a website, an attacker could recognize that you have the same password for sites x, y and z, even if he doesn’t know what it is. If passwords are encrypted along with the website as a unit, or if the whole set of password information is encrypted in one go, then this is no longer an issue. I would like to use password sync and anxiously await more detail about how these passwords are encrypted and sent/stored so I can begin using it with peace of mind.


@vontrapp: Look in your Firefox profile folder and see if you have a file named foxmarks-password-baseline-SOMEoddCHARACTERShere.json. If I understand correctly, that is the file which is synchronized with the server. From what I can tell, all the important data is encrypted(including the names of the sites for which passwords belong). If I am wrong, someone please correct me.

Besides that, if you choose the option “Encrypt all” under Advanced > Encryption Security, in Foxmarks’ preferences, all data sent to the server should be encrypted(in addition to any encryption which was already applied) and you should not have to worry.


the new password sync option is fantastic. I’m forever installing new pc’s and foxmarks is always the first plugin I install for FF. I still remember the day I excitedly told my wife about it, while I was merging the bookmarks I had at home with the previously sync’d bookmarks from work.

No more e-mailing myself weblinks to check out later either at home or work either. The passwords were always a pain to remember, especially since I use multiple passwords, and now .. that’s solved too.

thanks Foxmarks team! (I think I’ve gushed enough now)


Really like the password sync. Only can make Firefox better. Agree with the comment above. Awesome Job Foxmarks!


Thanks! This makes Foxmarks even better to use.


Yeah! When can we expect to see an option to sync extensions, add-ons, themes, and plug-ins? That would be awesome!!!


This is really useful and good tool to access bookmarks anywhere


Of all the plug-ins and bevy of extension the best in and amongst ever multiplying utilities on Firefox is Foxmarks and its version V.2.5 is just the thing everyone ; evermore wants .Will the pin change option be available as it grows and will the windows on foxmarks have translucent a bit of vista’s AERO GLASS touch beside the loading bar done up the Cere bro extension in MAXTHON browser.All in all foxmarks is an eye candy .Can we have the THUMBNAIL snapshots of guys behind this magical wand on the Homepage or on the BLOG site .
Thanks it is worth every click

PAWAN SOBTI


UNBELIEVABLE GREAT WORK!! An extension-sync would be just icing on the cake but I realise that’s somewhat difficult. WELL DONE GUYS!!!


Many thanks for the great tool.
Is there any option which I can upload selected folders only?
thanks.