Sandkey
Overview
Credential manager for local development environments
Sandkey is the credential manager built for developers, not end users. When you spin up a new local project — Laravel, Rails, Django, a Docker stack — you always end up typing the same default credentials over and over: admin / admin, root / secret, user@example.com / password. Sandkey remembers them for you and fills them in with one click. Local-first, always. Your credentials never leave your machine. There is no account, no server, no sync, no analytics. Everything is stored in Chrome's local storage and stays there. Sandkey cannot phone home because it has no home to phone. Open source. Sandkey is fully open source and available on GitHub: https://github.com/illegalstudio/sandkey Read the code, audit it, fork it, contribute to it. Built for sandbox domains. Sandkey is designed around the domains developers actually use: localhost, *.test, *.local, *.home.arpa, custom Docker hostnames. It supports wildcard patterns at any depth and port-aware matching — localhost:3000 can have different credentials than localhost:8080. Longest-match priority. Configure *.test as a catch-all and *.api.test for a specific project. Sandkey always picks the most specific rule — no surprises. Autofill that works everywhere. The autofill dropdown is injected via Shadow DOM, so it never clashes with the page's own styles. It works with React, Vue, Angular, and plain HTML forms — including dynamically rendered ones. No bloat. No background service worker. No remote calls. No dependencies. The entire extension is a handful of vanilla JavaScript files.
0 out of 5No ratings
Details
- Version1.0.0
- UpdatedMarch 4, 2026
- Offered byIllegal Studio
- Size40.96KiB
- LanguagesEnglish (United States)
- Developer
Email
admin@illegal.studio - Non-traderThis developer has not identified itself as a trader. For consumers in the European Union, please note that consumer rights do not apply to contracts between you and this developer.
Privacy
This developer declares that your data is
- Not being sold to third parties, outside of the approved use cases
- Not being used or transferred for purposes that are unrelated to the item's core functionality
- Not being used or transferred to determine creditworthiness or for lending purposes