English
See more
Final password is cryptographically derived from web page URL address, salt and user provided secret passphrase.
Latest Version
Version
0.91
Update
July 28, 2018
Size
878KiB
Developer
Category
Users
21 
Rating
4 ★
Manifest Version
2
Web Store Status
Extension ID
Languages Support
Permissions
ContextMenus
Storage
ActiveTab
See more
Storage
ActiveTab
Alzheimer password generator Extension
Open Source Chrome extension for domain dependent password generation (ALPHA version)
Store seed for your password locally on your computer for additional security.
Final password is cryptographically derived from web page URL address, salt and user provided secret passphrase. The salt should be stored physically, so you can recover it in the future.
WORK IN PROGRESS. The crypto part works fine, but there are some jQuery/css issues on some pages (iframes, jQuery dialog etc.)
CURRENT THREAT MODEL:
* No one with an access to the PC with installed extension should be able to authenticate without knowing the correct passphrase.
* The same passphrase used in two different web browsers should produce two different passwords (cryptographic salt will solve this problem).
* If an attacker obtains password for some websites, she should not be able to derive passwords for another websites using that knowledge.
* Attacker should not be able to brute force master passphrase from the salt and knowledge of one password (PBKDF with lots of iterations).
* It provides protection against basic keyloggers (but they can read our salt from the memory / file...)
For more information, see Github repository.
Read more
Store seed for your password locally on your computer for additional security.
Final password is cryptographically derived from web page URL address, salt and user provided secret passphrase. The salt should be stored physically, so you can recover it in the future.
WORK IN PROGRESS. The crypto part works fine, but there are some jQuery/css issues on some pages (iframes, jQuery dialog etc.)
CURRENT THREAT MODEL:
* No one with an access to the PC with installed extension should be able to authenticate without knowing the correct passphrase.
* The same passphrase used in two different web browsers should produce two different passwords (cryptographic salt will solve this problem).
* If an attacker obtains password for some websites, she should not be able to derive passwords for another websites using that knowledge.
* Attacker should not be able to brute force master passphrase from the salt and knowledge of one password (PBKDF with lots of iterations).
* It provides protection against basic keyloggers (but they can read our salt from the memory / file...)
For more information, see Github repository.
Source Manifest.json
{"update_url": "https://clients2.google.com/service/update2/crx", "name": "Alzheimer password generator", "description": "Final password is cryptographically derived from web page URL address, salt and user provided secret passphrase.", "version": "0.91", "permissions": [ "contextMenus", "storage", "activeTab", "" ], "options_page": "options.html", "background": { "scripts": [ "main.js" ], "persistent": false }, "content_scripts": [{ "all_frames": false, "matches": ["http://*/*", "https://*/*"], "css": ["theme/jquery-ui.css", "custom.css"], "js": ["js/jquery.min.js", "js/jquery-ui.min.js", "js/jquery.imgpreload.min.js", "lib/pbkdf2.js", "crypto_helpers.js", "content_script.js" ] }], "web_accessible_resources": [ "theme/images/*.png", "theme/jquery-ui.css", "custom.css" ], "icons": { "128": "img/icon.png" }, "browser_action": { "default_icon": "img/icon.png" }, "manifest_version": 2}
Read more
