• First comes the sign-on file header which is always "#2c"
• Next comes the reject host list in clear text, one per line and terminated with full stop.
• After that normal host list is stored in the following format
  • Host URL
    • Name  (username or *password)
    • Value (encrypted)
    • .(full stop)

• First comes the sign-on file header which is always "#2d"
• Next comes the reject host list in clear text, one per line and ends with full stop.
• After that normal host list is stored in the following format
  • Host URL
    • Name  (username or *password)
    • Value (encrypted)
    • Subdomain URL
    • .(full stop)

• First comes the sign-on file header which is always "#2e"
• Next comes the excluded host list in clear text, one per line and ends with full stop.
• After that saved host list is stored in the following format
  • Host URL
    • Name  (username or *password)
    • Value (encrypted)
    • Subdomain URL
    • --- (Dashed line denoting the end of host entry)
    • .(full stop)

The new signons.sqlite database file has two tables moz_disabledHosts and moz_logins. The moz_disabledHosts table contains list of excluded websites which are exempted from storing passwords by user. The moz_logins table contains all the saved website passwords. Here is more detailed description of each tables...

• table - moz_disabledHosts
  • id - index of each entry
  • hostname - blacklisted website URL


• table - moz_logins
  • id - index of each entry
  • hostname - base website URL
  • httpRealm -
  • formSubmitURL - Actual website URL for which secrets are saved.
  • usernameField - name of username element of form field
  • passwordField - name of password element of form field
  • encryptedUsername - encrypted username
  • encryptedPassword - encrypted password
  • guid - unique GUID for each entry
  • encType - value 1 indicates encrypted