1. A master password must be used in Firefox
Many users save passwords in Firefox. Since using same password in every login page is strongly discouraged as bad habit, users may need to use set of passwords. Therefore users may need to save passwords in Firefox. How ever saving passwords with out using master password is very dangerous. Therefore if you using Windows, go Tools -> Preferences -> Security (Tab) and add a master password. Then when you open Firefox again it will ask only once for master password before saved passwords appears. (In Linux Preferences in Edit Menu. In Firefox 4, it is in Firefox button)
2. Install patches when available
Firefox checks for updates automatically and indicate you when an update available. Since Bugzilla team is giving a great effort to save you from vulnerabilities, It is your responsibility to install released updates as soon as possible to keep the Firefox safe.
3. Remove history after using a public computer
If you logged to your favorite web pages from Firefox which is installed public computer (i.e. Internet cafe) make sure you clean all your history and privacy data before you leave. This can be done at Preference -> Privacy Tab. Or you can use private browsing in this sort place.
4. Use extensions created by trusted developers
Since any one can develop extensions for Firefox, it is possible to create an evil extension and hi-jack your personal data. Therefore it is recommend to get add-onns only from https://addons.mozilla.org/en-US/firefox/ and make sure count of downloads and nature of comments before downloading.
5. Disable PDF opening in Firefox
Opening PDF in Firefox as tab is a feature given by the Adobe Reader plugin. How ever this caused severe problem in past few months due to loop holes of Adobe Reader makes Firefox vulnerable. Instead of reading PDF inside Firefox, download and open with Adobe Reader.
6. Do not let other software to install Tool Bars and Change Default Search Engine
While installing many freewares and sharewares, they tries to install tool bars to Firefox which are not safe. In most of these case you can un-tick those during installing such software. Therefore install those shareware or freeware with carefully reading instructions in the window and not clicking Next button blindly. Be aware of changing default search engine also. Because Firefox’s default search engine is Google. How ever those freeware can change it, and appears as Google but gives search results with malicious links.
7. Install Security Add-ons
Install security add-ons like Adblock Plus and No Script. No Script can detect and stop Cross site scripting (XSS) attacks which is a most common threat in modern web security. Also No Script can stop Click Jacking which a major problem comes through in facebook fake applications.
Source: http://www.techcert.lk/index.php?op...refox-more-safe&catid=12:introduction&lang=en
