EasyPwd

Remember one passphrase. Get the same strong password for every site, on any device. Offline, no account, no sync.

Remember one passphrase. Get the same strong password for every site, on any device. EasyPwd calculates a unique password for each website from your email, your master passphrase, and the site's name. There is nothing to sync: install EasyPwd on another computer, enter the same email and passphrase, and you get the same passwords. Passwords you can't change are kept in a local encrypted vault. No account. No server. No cloud sync. No analytics. No background access to the websites you visit. HOW IT WORKS 1. Enter your email (or any name) and a master passphrase. 2. Type a website, such as github.com, and press Enter. 3. Copy your password. It is calculated, not stored, and it will be the same tomorrow and on every other device. 4. On a login page, click the EasyPwd icon (or press Ctrl/⌘+Shift+L) and click Fill. FEATURES • Generated passwords: strong, unique, and the same on every device. • Password versions: if a site is breached, click "New password" to move to the next version. The previous password stays visible until you've updated the site. • Per-site rules: set the length (8–64) and character types for sites with limits. • Key fingerprint: four words confirm you typed the same email and passphrase on every device. Different words mean a typo. • Match site rules with on-device AI: reads a sign-up page's password requirements with Chrome's built-in Gemini Nano (or a built-in reader) and generates a password that fits. Nothing leaves your device. • Fake-site warning: the popup warns when an address imitates a site you have a login for, such as paypa1.com or paypal-login.com. • Plain-language search: try "weak passwords" or "gmail with 2FA". On-device AI can interpret longer questions; your vault is never given to it. • Saved logins: store existing passwords, PINs, and Wi-Fi keys in an AES-256-GCM encrypted vault. • One-click fill: the toolbar popup finds logins for the current site and fills the form. • Two-factor codes (TOTP): paste a setup key or QR screenshot to see and fill 6-digit 2FA codes. • Usernames, websites, and notes for every login, with one-click copy. • Password health: flags weak, reused, and year-old passwords. • Random password generator with a strength estimate. • Auto-lock after 1, 5, 15, or 30 minutes of inactivity. • Copied passwords are cleared from the clipboard after 30 seconds. • Encrypted backups, restore, and import from Chrome's password CSV export. • Light and dark themes. PRIVACY AND SECURITY • Everything runs inside the extension. It makes no network requests. • No install warnings. "storage" holds the encrypted vault, "clipboardWrite" copies when you click copy, and "activeTab" + "scripting" fill the current page or read its password rules only when you open the popup and click Fill or Match site rules, and "alarms" + "offscreen" clear copied passwords from the clipboard. • Built on the browser's native Web Crypto: PBKDF2-SHA-256 (600,000 iterations), HKDF, HMAC-SHA-256, and AES-256-GCM. • The password algorithm is published with test vectors, so anyone can verify or reimplement it. IMPORTANT • Your passphrase cannot be recovered. Choose a long one you will remember, such as several unrelated words. • Anyone who learns your passphrase and email can calculate your generated passwords. Keep it private and unique. • EasyPwd is open source and has not been independently audited. Open source (MIT): https://github.com/xianyangwong/easypwd