SecurityManager

Save your website logins and fill them only on the exact site they belong to.

SecurityManager is a credentials manager that lives in Chrome's side panel and keeps your logins on your local computer so you may export and backup your credentials to an encrypted SQLite database to maintain a secure and encrypted backup of your credentials that you may re-import in case you have to clear your Chrome cache files. FILLS ONLY WHERE IT BELONGS • A login saved for one address is offered on that exact address and nowhere else. Look-alike domains, other subdomains and different ports get nothing, so a phishing page that copies a real site can't get your password from it. • Nothing is filled until you click: Fill in the side panel, or the key icon in the sign-in form. • The website never sees your list of accounts. The key icon's menu belongs to SecurityManager, not to the page. • Handles modern sign-in forms, including ones inside iframes and shadow DOM, and React and Vue apps. Works on localhost too, for developers. SAVES AS YOU GO • After you sign in somewhere new, SecurityManager asks whether to save the login. It asks only when the sign-in worked, never after a wrong password. • Changed a password? It offers to update the saved login. • Choose "Never here" for sites you don't want saved. A SYNC FILE YOU OWN • At setup you choose one file on your computer. While the side panel is open, SecurityManager keeps that file up to date. • Open the same file from SecurityManager in another Chrome profile or on another computer to take your logins with you. Changes made on each side are merged. • Before writing over another device's changes, SecurityManager keeps a safety copy (the last 20). LOCKS WHEN YOU STEP AWAY • Locks after 5 minutes, 15 minutes or an hour of inactivity (you choose), and always when your computer locks. • After five wrong master passwords, it waits 30 seconds before you can try again. • A copied password is cleared from the clipboard after 30 seconds. EVERYTHING IN ONE PANEL • See the logins for the site you're on, or search all of them. • The toolbar icon shows how many saved logins match the current site. • Fully usable with the keyboard alone. PRIVATE BY DESIGN • No account, no analytics, no crash reports and no network requests of any kind. The extension's security policy blocks connections to anything outside itself. • Your logins exist only in Chrome's storage on this computer and in the sync file you chose. Removing the extension deletes its storage on this computer; your sync file stays until you delete it. GOOD TO KNOW • Sign-ins split across two pages (email first, then password) are filled one step at a time, but are not yet offered for saving. • The file dialog is tested on macOS. Windows and Linux are supported but less tested. • After SecurityManager updates, unlock it again. • If Chrome is force-quit while saving, delete any leftover ".crswap" file next to your sync file. It can hold a partial, unencrypted copy.