Safari plugin in Private mode

Hi

I’m using Passbolt plugin 5.14.4 on macOS Tahoe 2.6.1 (Safari version 26.6 21624.4.5.11.5)

I have set for Passbolt plugin: allow to use in Private mode

I have opened regular window in Safari and logged into Passbolt

When starting new Safari window in Private mode - plugin requires to login (including “Import private key”)

Microsoft Edge behaves differently: an InPrivate window uses the Passbolt extension/account already configured in the normal window.

How to achieve working Passbolt plugin in Safari private mode?

Hello @DanielP, and welcome to the forum!

First of all, please note that we don’t officially support running the extension in private browsing. In fact, we expect that most of the time it won’t behave the way users would hope.

In Safari and many other browsers, private mode is a specific mode in which the browser doesn’t permanently store information like history, cookies, and so on. On some browsers, this mode also doesn’t keep the local storage (and local storage is exactly where the extension saves its configuration after you go through the “import private key” process). As a result, you might set up your account, but once you end your private browsing session, your account is lost and you have to redo the import the next time. This is out of our hands, and it’s the reason we don’t support this mode. Personally, I’d expect private mode not to keep local storage as well, since doing so would go against the whole point of private browsing.

On Edge, you got “lucky”, I guess, though it does raise questions about their security model, since it means private mode shares its configuration with a different browser profile, which is honestly a bit odd.

On Safari, I gave it a try out of curiosity, and it behaves as if private mode were a dedicated browser profile. (For reference, each browser profile has its own local storage that isn’t shared across profiles.) So you’ll need to set up your account in private mode as if it were a brand-new profile. There’s nothing more we can do about that.

Again, you may run into issues later when using the extension in private mode (in any browser), since vendors may change their local storage policy and, at some point, decide to clear local storage after a private browsing session too. If that happens, there won’t be anything we can do about it.

Steph

Steph

thank you for extensive explanation.
Looks like I need to learn with switching windows to copy/paste user/password :frowning:

Or come back to Microsoft Edge and hope it will not be fixed :slight_smile:

(I’m using a lot of web pages that requires login - but for different customers / users)

DanielP

For Safari in private mode, I meant that once it’s configured with the account you want, it seems to be permanently registered for the next private sessions.

However, it’s not something we can guarantee. So you can give a try like that (as you can have multiple browser profile set with the same Passbolt account).