{"id":2530,"date":"2018-06-25T19:59:53","date_gmt":"2018-06-25T19:59:53","guid":{"rendered":"https:\/\/blog.mozilla.org\/futurereleases\/?p=2530"},"modified":"2018-06-25T22:05:21","modified_gmt":"2018-06-25T22:05:21","slug":"testing-firefox-monitor-a-new-security-tool","status":"publish","type":"post","link":"https:\/\/blog.mozilla.org\/futurereleases\/2018\/06\/25\/testing-firefox-monitor-a-new-security-tool\/","title":{"rendered":"Testing Firefox Monitor, a New Security Tool"},"content":{"rendered":"<p>From shopping to social media, the average online user will have <a href=\"https:\/\/www.itproportal.com\/2015\/09\/13\/how-will-we-manage-200-passwords-in-2020\/\">hundreds of accounts<\/a> requiring passwords. At the same time, the number of user data breaches occurring each year continues to <a href=\"https:\/\/www.statista.com\/statistics\/273550\/data-breaches-recorded-in-the-united-states-by-number-of-breaches-and-records-exposed\/\">rise dramatically<\/a>. Understandably, people are now <a href=\"http:\/\/www.businessinsider.com\/americans-far-more-worried-about-getting-hacked-than-murdered-2017-11\">more worried<\/a> about internet-related crimes involving personal and financial information theft than conventional crimes. In order to help keep personal information and accounts safe, we will be testing user interest in a security tool that lets users check if one of their accounts has been compromised in a data breach.<\/p>\n<p><a href=\"https:\/\/blog.mozilla.org\/futurereleases\/files\/2018\/06\/Firefox-Monitor-Homepage2.png\"><img decoding=\"async\" loading=\"lazy\" class=\"aligncenter wp-image-2539 size-large\" src=\"https:\/\/blog.mozilla.org\/futurereleases\/files\/2018\/06\/Firefox-Monitor-Homepage2-600x275.png\" alt=\"\" width=\"600\" height=\"275\" srcset=\"https:\/\/blog.mozilla.org\/futurereleases\/files\/2018\/06\/Firefox-Monitor-Homepage2-600x275.png 600w, https:\/\/blog.mozilla.org\/futurereleases\/files\/2018\/06\/Firefox-Monitor-Homepage2-300x138.png 300w, https:\/\/blog.mozilla.org\/futurereleases\/files\/2018\/06\/Firefox-Monitor-Homepage2-768x352.png 768w, https:\/\/blog.mozilla.org\/futurereleases\/files\/2018\/06\/Firefox-Monitor-Homepage2-1000x459.png 1000w, https:\/\/blog.mozilla.org\/futurereleases\/files\/2018\/06\/Firefox-Monitor-Homepage2.png 1199w\" sizes=\"(max-width: 600px) 100vw, 600px\" \/><\/a>We decided to address a growing need for account security by developing Firefox Monitor, a proposed security tool that is designed for everyone, but offers additional features for Firefox users. Visitors to the Firefox Monitor website will be able to check (by entering an email address) to see if their accounts were included in known data breaches, with details on sites and other sources of breaches and the types of personal data exposed in each breach. The site will offer recommendations on what to do in the case of a data breach, and how to help secure all accounts. We are also considering a service to notify people when new breaches include their personal data.<\/p>\n<p><strong>Partnership with HaveIBeenPwned.com<\/strong><br \/>\nIn order to create Firefox Monitor, we have partnered with <a href=\"https:\/\/haveibeenpwned.com\/\">HaveIBeenPwned.com<\/a> (HIBP). HIBP is a valuable service, operated by Troy Hunt, one of the most <a href=\"https:\/\/www.bankinfosecurity.com\/blogs\/visual-journal-infosecurity-europe-2018-p-2636\">renowned<\/a> and <a href=\"https:\/\/www.cso.com.au\/article\/641857\/auscert-2018-awards\/\">respected<\/a> security experts and bloggers in the world. Troy is best known for the HIBP service, which includes a database of email addresses that are known to have been compromised in data breaches. Through our partnership, Firefox is able to check your email address against the HIBP database in a private-by-design way. You can find Troy\u2019s blog post on the partnership <a href=\"https:\/\/www.troyhunt.com\/were-baking-have-i-been-pwned-into-firefox-and-1password\">here<\/a>.<\/p>\n<p><strong>How does it work?<\/strong><br \/>\nIt is important that we not violate our users\u2019 privacy expectations with respect to the handling of their email address. As such, we\u2019ve worked closely with HIBP and <a href=\"https:\/\/blog.cloudflare.com\/validating-leaked-passwords-with-k-anonymity\/\">Cloudflare<\/a> to create a method of anonymized data sharing for Firefox Monitor, which never sends your full email address to a third party, outside of Mozilla. You can read the full details of the solution <a href=\"https:\/\/blog.mozilla.org\/security\/2018\/06\/25\/scanning-breached-accounts-k-anonymity\/\">here<\/a>.<\/p>\n<p><strong>What will we be testing?<\/strong><br \/>\nAt this stage, we are testing initial designs of the Firefox Monitor tool in order to refine it. Beginning next week, we expect to invite approximately 250,000 users (mainly in the US) to try out the feature.<\/p>\n<p><strong>What to expect next<\/strong><br \/>\nOnce we\u2019re satisfied with user testing, we will work on making the service available to all Firefox users. Once a release schedule has been established, it will be announced in a follow-up blog post.<\/p>\n<p>In the meantime, check out and download the latest version of Firefox Quantum for the desktop in order to use the Firefox Monitor feature when it becomes available.<\/p>\n<p><strong>Download<\/strong> <a href=\"https:\/\/www.mozilla.org\/firefox\/new\/?utm_source=blog.mozilla.org&amp;utm_campaign=future_releases&amp;utm_medium=referral&amp;utm_content=firefox_monitor\">Firefox for Windows, Mac, Linux<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>From shopping to social media, the average online user will have hundreds of accounts requiring passwords. At the same time, the number of user data breaches occurring each year continues &hellip; <a class=\"go\" href=\"https:\/\/blog.mozilla.org\/futurereleases\/2018\/06\/25\/testing-firefox-monitor-a-new-security-tool\/\">Read more<\/a><\/p>\n","protected":false},"author":610,"featured_media":2537,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[318206],"coauthors":[282888],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v22.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Testing Firefox Monitor, a New Security Tool - Future Releases<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/blog.mozilla.org\/futurereleases\/2018\/06\/25\/testing-firefox-monitor-a-new-security-tool\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Peter Dolanjski\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/blog.mozilla.org\/futurereleases\/2018\/06\/25\/testing-firefox-monitor-a-new-security-tool\/\",\"url\":\"https:\/\/blog.mozilla.org\/futurereleases\/2018\/06\/25\/testing-firefox-monitor-a-new-security-tool\/\",\"name\":\"Testing Firefox Monitor, a New Security Tool - Future Releases\",\"isPartOf\":{\"@id\":\"https:\/\/blog.mozilla.org\/futurereleases\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/blog.mozilla.org\/futurereleases\/2018\/06\/25\/testing-firefox-monitor-a-new-security-tool\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/blog.mozilla.org\/futurereleases\/2018\/06\/25\/testing-firefox-monitor-a-new-security-tool\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/blog.mozilla.org\/futurereleases\/files\/2018\/06\/Logo.png\",\"datePublished\":\"2018-06-25T19:59:53+00:00\",\"dateModified\":\"2018-06-25T22:05:21+00:00\",\"author\":{\"@id\":\"https:\/\/blog.mozilla.org\/futurereleases\/#\/schema\/person\/dd77cb456eceabaeedbe81d15e119a85\"},\"breadcrumb\":{\"@id\":\"https:\/\/blog.mozilla.org\/futurereleases\/2018\/06\/25\/testing-firefox-monitor-a-new-security-tool\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/blog.mozilla.org\/futurereleases\/2018\/06\/25\/testing-firefox-monitor-a-new-security-tool\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/blog.mozilla.org\/futurereleases\/2018\/06\/25\/testing-firefox-monitor-a-new-security-tool\/#primaryimage\",\"url\":\"https:\/\/blog.mozilla.org\/futurereleases\/files\/2018\/06\/Logo.png\",\"contentUrl\":\"https:\/\/blog.mozilla.org\/futurereleases\/files\/2018\/06\/Logo.png\",\"width\":1400,\"height\":770,\"caption\":\"Firefox Logo\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/blog.mozilla.org\/futurereleases\/2018\/06\/25\/testing-firefox-monitor-a-new-security-tool\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/blog.mozilla.org\/futurereleases\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Testing Firefox Monitor, a New Security Tool\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/blog.mozilla.org\/futurereleases\/#website\",\"url\":\"https:\/\/blog.mozilla.org\/futurereleases\/\",\"name\":\"Future Releases\",\"description\":\"Be the first to know what&#039;s new with upcoming Firefox releases.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/blog.mozilla.org\/futurereleases\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/blog.mozilla.org\/futurereleases\/#\/schema\/person\/dd77cb456eceabaeedbe81d15e119a85\",\"name\":\"Peter Dolanjski\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/blog.mozilla.org\/futurereleases\/#\/schema\/person\/image\/e5cbd0410e24d27965d4c4912763df5d\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/4008a18f73677c23e42b2dde0ea6e73d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/4008a18f73677c23e42b2dde0ea6e73d?s=96&d=mm&r=g\",\"caption\":\"Peter Dolanjski\"},\"description\":\"Peter is a Product Manager for Firefox and a defender of the open Web.\",\"url\":\"https:\/\/blog.mozilla.org\/futurereleases\/author\/pdolanjskimozilla-com\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Testing Firefox Monitor, a New Security Tool - Future Releases","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/blog.mozilla.org\/futurereleases\/2018\/06\/25\/testing-firefox-monitor-a-new-security-tool\/","twitter_misc":{"Written by":"Peter Dolanjski","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/blog.mozilla.org\/futurereleases\/2018\/06\/25\/testing-firefox-monitor-a-new-security-tool\/","url":"https:\/\/blog.mozilla.org\/futurereleases\/2018\/06\/25\/testing-firefox-monitor-a-new-security-tool\/","name":"Testing Firefox Monitor, a New Security Tool - Future Releases","isPartOf":{"@id":"https:\/\/blog.mozilla.org\/futurereleases\/#website"},"primaryImageOfPage":{"@id":"https:\/\/blog.mozilla.org\/futurereleases\/2018\/06\/25\/testing-firefox-monitor-a-new-security-tool\/#primaryimage"},"image":{"@id":"https:\/\/blog.mozilla.org\/futurereleases\/2018\/06\/25\/testing-firefox-monitor-a-new-security-tool\/#primaryimage"},"thumbnailUrl":"https:\/\/blog.mozilla.org\/futurereleases\/files\/2018\/06\/Logo.png","datePublished":"2018-06-25T19:59:53+00:00","dateModified":"2018-06-25T22:05:21+00:00","author":{"@id":"https:\/\/blog.mozilla.org\/futurereleases\/#\/schema\/person\/dd77cb456eceabaeedbe81d15e119a85"},"breadcrumb":{"@id":"https:\/\/blog.mozilla.org\/futurereleases\/2018\/06\/25\/testing-firefox-monitor-a-new-security-tool\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/blog.mozilla.org\/futurereleases\/2018\/06\/25\/testing-firefox-monitor-a-new-security-tool\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blog.mozilla.org\/futurereleases\/2018\/06\/25\/testing-firefox-monitor-a-new-security-tool\/#primaryimage","url":"https:\/\/blog.mozilla.org\/futurereleases\/files\/2018\/06\/Logo.png","contentUrl":"https:\/\/blog.mozilla.org\/futurereleases\/files\/2018\/06\/Logo.png","width":1400,"height":770,"caption":"Firefox Logo"},{"@type":"BreadcrumbList","@id":"https:\/\/blog.mozilla.org\/futurereleases\/2018\/06\/25\/testing-firefox-monitor-a-new-security-tool\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/blog.mozilla.org\/futurereleases\/"},{"@type":"ListItem","position":2,"name":"Testing Firefox Monitor, a New Security Tool"}]},{"@type":"WebSite","@id":"https:\/\/blog.mozilla.org\/futurereleases\/#website","url":"https:\/\/blog.mozilla.org\/futurereleases\/","name":"Future Releases","description":"Be the first to know what&#039;s new with upcoming Firefox releases.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/blog.mozilla.org\/futurereleases\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/blog.mozilla.org\/futurereleases\/#\/schema\/person\/dd77cb456eceabaeedbe81d15e119a85","name":"Peter Dolanjski","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blog.mozilla.org\/futurereleases\/#\/schema\/person\/image\/e5cbd0410e24d27965d4c4912763df5d","url":"https:\/\/secure.gravatar.com\/avatar\/4008a18f73677c23e42b2dde0ea6e73d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/4008a18f73677c23e42b2dde0ea6e73d?s=96&d=mm&r=g","caption":"Peter Dolanjski"},"description":"Peter is a Product Manager for Firefox and a defender of the open Web.","url":"https:\/\/blog.mozilla.org\/futurereleases\/author\/pdolanjskimozilla-com\/"}]}},"_links":{"self":[{"href":"https:\/\/blog.mozilla.org\/futurereleases\/wp-json\/wp\/v2\/posts\/2530"}],"collection":[{"href":"https:\/\/blog.mozilla.org\/futurereleases\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.mozilla.org\/futurereleases\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.mozilla.org\/futurereleases\/wp-json\/wp\/v2\/users\/610"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.mozilla.org\/futurereleases\/wp-json\/wp\/v2\/comments?post=2530"}],"version-history":[{"count":0,"href":"https:\/\/blog.mozilla.org\/futurereleases\/wp-json\/wp\/v2\/posts\/2530\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.mozilla.org\/futurereleases\/wp-json\/wp\/v2\/media\/2537"}],"wp:attachment":[{"href":"https:\/\/blog.mozilla.org\/futurereleases\/wp-json\/wp\/v2\/media?parent=2530"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.mozilla.org\/futurereleases\/wp-json\/wp\/v2\/categories?post=2530"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.mozilla.org\/futurereleases\/wp-json\/wp\/v2\/tags?post=2530"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/blog.mozilla.org\/futurereleases\/wp-json\/wp\/v2\/coauthors?post=2530"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}