Where does Firefox store form info ?

[ynicle]

try ~/.mozilla/firefox

[Dolda2000]

I don't know about the form info file, but Firefox can be configured to encrypt the password file with a passphrase. That passphrase is then used as the encryption key for that file, in which case it no longer matters if the attacker knows the algorithm.

I've done this with my firefox. I just enter the passphrase the first time Firefox needs to decrypt the password file, and then it remembers the passphrase until I restart it (i.e. it only stores it in volatile core memory).

To do this, go to Edit->Preferences->Advanced->Certificates->Manage Security Devices. Then select the Software Security Device and click Change Password. (Phew... I hate these GUI paths...)