Engineering Blog
Product thinking and engineering deep-dives from Account Password Helper: local-first security, MV3 performance in practice, and Web Crypto internals.
'Zero Cloud, Open Source, Built for Developers: Why I Built Another Browser Password Manager'
Why does the world need another password manager? The case for a local-first, open-source tool built around multi-environment logins, one-click sign-in, and zero network trust.
'Opening the Chrome Side Panel in Under One Second: MV3 Service Worker Keep-Alive and Pre-Warming in Practice'
Manifest V3 service workers can be terminated at any time, and side panel cold-start white screens are the #1 pain in extension UX. A complete breakdown of Account Password Helper's sub-second strategy — dual-layer keep-alive, four-layer resource pre-warming, three-way data racing, and non-blocking CSS.
'Password-Manager-Grade Encryption with Web Crypto: PBKDF2 at 600,000 Iterations + AES-256-GCM in Practice'
No crypto libraries, just the browser-native Web Crypto API. How Account Password Helper implements an auditable encryption system — key derivation, field-level encryption, session lifecycle, and atomic re-keying.
Four New Features, Four Implementation Notes: Right-Click Fill, Site-Wide Search, Quick Add & Read-Only Details
None of these updates added a settings toggle. This post walks through the implementation trade-offs and security boundaries behind right-click fill, inline panel positioning, side panel site-wide search, and the read-only entry drawer.