This Add-On provides the classic padlock icon with the classic semantic.

The padlock icon will be shown when connecting successfully to a site using the https protocol. (The behaviour is equivalent to that of older Firefox versions.)

As you might already have noticed, Firefox 4 no longer displays a padlock icon by default. Instead Firefox now uses an Site Identity Button. An area to the left of the web page address is being used to indicate the security/identity state of a connection. The presence of additional coloured text to the left of the address bar is meant to notify the user about the level of verified identification information that comes with the connection to the site. This identity notifier implies that an encrypted connection is being used.

When visiting a site with mixed security, i.e. some content shown by the site was loaded without an appropriate security channel, Firefox will only drop the identity indicator to the left of the address bar. This might be difficult to notice. Therefore, on such sites this Add-On will display a "broken" padlock (again this is the classic behaviour seen before Firefox 4).

In order to draw attention to the new Identity Button, this Add-On displays the padlock icon inside the new identity button. However, you can change this default and configure your preferred location for the padlock icon (e.g. location bar left or right, status/add-on bar, or tab bar).

Additional Features
Starting with version 0.5.0, this Add-On provides additional features. For most of them, you will have to use the Add-On preferences to enable them.

You might ask, why do I still suggest a padlock? I have heard the argument that the padlock might be misleading. I agree that showing a padlock alone is not sufficient, because the world is more complex than telling users "you're secure" or "you're not secure". It's a good idea to show additional information, but in my opinion, this intention doesn't justify removing a well known indicator altogether. I welcome the introduction of the new identity button that gives additional information about the level of identity verification that has been performed. On the other hand, in order to get a padlock, the connection must be encrypted and we must have verified a site is using a certificate that demonstrates domain ownership, so in my opinion, showing a padlock still has value. Furthermore, that's what people are used to and have been trained to look for. In my opinion it's a reasonable approach to use a padlock icon to draw the attention to the area where identity information is displayed.

In my opinion, color is not a sufficient mechanism to transport information. Also, it fails for users who cannot distinguish colors. That's why I added a passport icon, next to the padlock icon, whenever Firefox treats a site as an Extended Validation site.

Download files:


This page is part of the LegacyCollector website.
Disclaimer: All material on this site is property of their respective owners and available under
open licenses to the best of our knowledge. If you are an author and would like anything removed,
then please write an e-mail to legacy [at] collector dot org.