Are my passwords uploaded to the cloud?

No. The extension is fully local: all data stays in your browser's local storage, sensitive fields are encrypted with AES-256-GCM, and nothing ever travels over the network.

What if I forget my master password?

It cannot be recovered; you can only use Reset to wipe the vault and start over. Back up regularly via data export or the encrypted .aph backup to avoid data loss.

What happens when my session expires?

All sensitive fields are automatically re-encrypted into ciphertext. Verify the master password again to restore access — no data is lost.

What is the security audit and what does it check?

A one-click password health scan showing a 0–100 overall score across five checks: weak passwords, password reuse, commonly leaked passwords (offline dictionary), stale passwords, and missing two-factor authentication. Everything is computed locally — no network, no uploads. Expiry reminders help you catch risks early.

Autofill doesn't work — what should I do?

Wait for the page to fully load and retry; the filler tries three strategies in order (native setter, execCommand, simulated keyboard events). If it still fails, refresh the page.

How do I customize the keyboard shortcuts?

Open chrome://extensions/shortcuts, find Account Password Helper, click the shortcut field next to a command and press a new combination. You can also open the read-only overview under Security Settings → Keyboard Shortcuts on the manager page, which flags the live status of every binding and links straight to that page.

What is one-click login and how is it different from other password managers?

One-click login is the core differentiator: press Ctrl+Shift+F and it not only autofills credentials but also ticks the 'I agree' checkbox and clicks the login button — sign-in completes in about one second. Other managers only fill the form; you still click login yourself. Exact-domain matching also isolates dev/test/staging/prod accounts, which no other manager offers.

How does Account Password Helper compare with Bitwarden and 1Password?

It is completely free, open source and stores data purely locally — no account, no cloud sync. Key differences: 1) one-click login (fill + tick + click) where others only fill; 2) multi-environment account isolation (dev/test/staging/prod); 3) built-in TOTP 2FA (paid tier in Bitwarden/1Password); 4) offline security audit (0–100 score, five checks). Bitwarden and 1Password are cloud-based, require accounts, and lock advanced features behind subscriptions.

How is side panel performance? Any lag?

The side panel is heavily optimized: it loads in about 20–50ms while the session is valid, thanks to Service Worker keep-alive and a resident password cache. It opens instantly even after the session expires. On Windows, a first cold start can take 1–2 extra seconds due to antivirus scanning; adding the Chrome extensions directory to the exclusion list brings it under one second.

How do I migrate to Account Password Helper from another password manager?

Upload a CSV file in the import dialog; the extension auto-detects Chrome, LastPass, Bitwarden and 1Password export formats with Chinese/English column-name mapping — migration takes about 30 seconds. JSON import and .aph encrypted backup import are also supported.

Open source (GPL-3.0) · Local encryption · Zero network transfer

One-click login + local encryption
Password management, never this effortless & efficient

A Chrome password manager built for developers & QA: press Ctrl+Shift+F for one-click login (fill + tick + click); exact-domain matching isolates dev / test / staging / prod accounts; built-in TOTP 2FA, security audit & password generator. All data is AES-256-GCM encrypted locally and never leaves your computer.

Install Extension GitHub Download View Demo Get Started

Can't access Google? Download the zip from GitHub Releases and install it manually 下载 zip 包手动安装

AES-256-GCM local encryption

Core Features

From encrypted storage to smart filling, from 2FA to health checks — the full lifecycle of your credentials in one place

Local Encryption — Passwords Never Leave the Browser

The master password derives a 256-bit key via PBKDF2 (600,000 iterations); username, password, URL, remark, and TOTP are all stored as ciphertext. When the session expires everything is re-encrypted — nothing is ever uploaded. Every master password field also warns live when Caps Lock is on, so a case typo never looks like a wrong password.

PBKDF2 · 600K iterations AES-256-GCM Zero network transfer Idle / restart auto-lock

Four Ways to Fill — One Click

Pick your style: the in-field inline mini panel (default), the side panel, the right-click menu, or the quick-fill shortcut. Quadruple fill strategies work on React / Vue and classic pages alike; exact domain matching separates test environments, the side panel toggles between this-site and all-entry search, and auto-login after filling is optional.

Side panel Ctrl+Shift+L Inline panel Ctrl+Shift+K Quick fill Ctrl+Shift+F Right-click fill Auto login trigger Password visibility toggle

Smart Login Form Detection

Automatically detects username, password, phone, and verification-code fields (including cross-iframe), and can auto-check options like "Remember me" and "Agree to terms".

TOTP Two-Factor Codes

Add a secret by scanning an on-page QR code or uploading an image; codes are generated locally (RFC 6238, zero network) with live codes and countdowns in the list, side panel and inline panel, plus one-click fill / copy — split two-step logins auto-hand off a live-code capsule on the code page.

Security Health Dashboard

One click yields a 0–100 score across five checks: weak, reused, and commonly leaked passwords (offline dictionary), long-unchanged entries, and missing 2FA — with expiry reminders, all computed locally.

Auto-Save Login Credentials

Chrome-style credential capture with a confirmation prompt on login; edit tag and remark in the prompt; allowlist/blocklist matching, fingerprint-based dedup, and one-click "Never for this site"; weak and reused passwords are flagged inline in the prompt (a heads-up only — saving is never blocked).

Import, Export & Encrypted Backup

CSV / JSON formats with auto-detection of Chrome, LastPass, Bitwarden, and 1Password exports; encrypted .aph backup export/import, plus email backup with scheduled reminders.

Tags, Favorites & Smart Search

Multi-select tags with stable colors, tag filtering, pinned favorites (configurable limit + LRU eviction), multi-field smart search (pinyin / initials + match highlighting) and sorting, one-click dedup, and batch delete / tag editing / export of selected entries — plus a read-only "View details" drawer for the full remark and password history, no edit mode needed. Long lists stay organized.

Dual-Mode Password Generator

Random passwords (length, character sets, ambiguous-character exclusion) and passphrases (EFF Diceware, 2048-word list) — cryptographically secure via Web Crypto, with a live strength bar.

Trash & Password History

Deleted entries stay in the trash for 30 days and can be restored anytime; password history is configurable (enable/disable, 1–10 encrypted snapshots per entry, default 5) for one-click rollback; changing the master password re-keys atomically without data loss.

Themes & Bilingual UI

6 color themes and instant Chinese/English switching; entries show site favicons (read from the browser's local cache, zero network) for faster recognition in long lists.

Feature Showcase

From first-time setup to daily use — one image per feature

Get Started in Four Steps

No sign-up, no login — download and go

Install the Extension

Install with one click from the Chrome Web Store (recommended — auto-updates). If you can't access Google, download the zip from GitHub Releases and install manually. After installation the key icon appears in the toolbar. 一键安装（推荐，后续自动更新）；无法访问 Google 的用户可从 GitHub Releases 下载 zip 包手动安装。安装完成后即可在工具栏看到钥匙图标。

Set a Master Password

On first use, set a master password of at least 8 characters with letters, numbers, and special characters — your only key.

Add or Import Passwords

Add accounts manually, or bulk import via the CSV template or a JSON file; tags keep everything organized.

Enjoy Auto-Fill

Open a login page and click the key icon inside the login field (inline fill, the default) — or fill via the side panel or the quick-fill shortcut (Ctrl+Shift+F).

Updating: simply overwrite the files in the original installation directory with the files from the new zip. Never load the extension from a different directory — Chrome would treat it as a fresh install and your existing password data would become inaccessible.

💡 How to find the current installation directory: open chrome://extensions/, find this extension's card, click "Details", and look for "Source: /path/to/your/directory" near the bottom — that path is the installation directory to overwrite when updating.更新时只需将压缩包内的文件直接覆盖原有安装目录下的文件即可，切勿重新选择其他目录加载扩展。更换加载目录会导致 Chrome 将其视为全新安装，原有的密码数据将无法访问。

💡 如何查看当前安装目录：打开 chrome://extensions/，找到本扩展的卡片，点击"详情"，在扩展详情页下方可以看到「来源：/path/to/your/directory」，冒号后面的路径即为当前安装目录，更新时将文件覆盖到此目录即可。

Why Choose Us?

Full comparison with mainstream password managers to find the best fit

Feature	Account Password Helper	Chrome Built-in	Bitwarden	1Password
Price	Free Forever	Free	Freemium	$2.99/月
Data Storage	100% Local	Local	Cloud	Cloud
One-Click Login (Fill + Tick + Click)	✓	✗	✗	✗
Multi-Environment Isolation	✓	✗	✗	✗
Built-in TOTP 2FA	✓	✗	Paid Only	✓
Security Audit	✓	✗	Paid Only	✓
Fully Offline	✓	✓	✗	✗
Import Chrome / Bitwarden / 1Password	✓	CSV Only	✓	✓
Account Required	Not Required	Not Required	Required	Required
Open Source	✓	✗	✓	✗

FAQ

Questions you may have before and after using

常见问题 / FAQ

安全与隐私 / Security & Privacy

我的密码会被上传到云端吗？ / Will my passwords be uploaded to the cloud?

不会。本插件采用纯本地存储方案，所有数据保存在浏览器本地空间，敏感字段经 AES-256-GCM 加密保存，永远不经过任何网络传输。

No. The extension stores everything locally in your browser. Sensitive fields are encrypted with AES-256-GCM and never travel over the network.

忘记主密码了怎么办？ / What if I forget the master password?

主密码无法找回，只能通过「重置」功能清空数据后重新设置。建议定期通过数据导出或加密备份（.aph 文件）备份，避免数据丢失。

The master password cannot be recovered. You can only use "Reset" to wipe the data and start over. Back up regularly via data export or encrypted backup (.aph) to avoid data loss.

如何修改主密码？ / How do I change the master password?

在密码管理页「安全设置」下拉菜单中点击「修改主密码」，验证当前主密码后设置新主密码即可。所有数据会用新密钥重新加密并原子写入，中途失败不会损坏数据。

Click "Change master password" in the "Security Settings" menu, verify the current one, and set a new one. All data is re-encrypted with the new key and written atomically.

什么是安全体检？ / What is Health Check?

安全体检是一键密码健康扫描功能，展示综合安全评分（0~100 分）和五维检测结果：弱密码、密码复用、常见泄露密码（离线 top-1000 弱口令字典）、长时间未更新（90/180/365 天分级预警）、未开启两步验证。全程本地计算，不联网。

A one-click password health scan showing an overall score (0–100) and five checks: weak passwords, reused passwords, commonly leaked passwords (offline top-1000 dictionary), long-unchanged passwords (90/180/365-day tiers), and accounts without 2FA. Everything is computed locally.

基础使用 / Basics

一键填充快捷键（Ctrl+Shift+F）是怎么工作的？ / How does the quick-fill shortcut work?

按下 Ctrl+Shift+F 后，插件直接填充与侧边栏列表首条一致的账号密码（域名匹配优先 + 收藏置顶），无需打开侧边栏。

Pressing Ctrl+Shift+F fills the same entry as the top of the side panel list (domain match first + favorites pinned) without opening the panel.

什么是内联填充？ / What is inline fill?

内联填充是侧边栏之外的另一种快捷填充方式。登录输入框获焦后会在右侧内缘显示钥匙图标，点击展开迷你面板选择账号即可填充。使用 Closed Shadow DOM 完全隔离页面样式。

An alternative to the side panel. A key icon appears inside the focused login field; click it to open a mini panel and pick an account to fill. Uses a closed Shadow DOM for full style isolation.

数据管理 / Data Management

支持从其他密码管理器导入吗？ / Can I import from other password managers?

支持。上传 CSV 文件，插件会自动识别 Chrome、LastPass、Bitwarden、1Password 的导出格式并映射字段。也支持 JSON 格式导入导出。

Yes. Upload a CSV and Chrome, LastPass, Bitwarden, and 1Password export formats are auto-detected. JSON import/export is also supported.

删除的密码能找回吗？ / Can I recover deleted passwords?

能。删除的密码会先移入回收站保留 30 天，支持单条「恢复」、「彻底删除」和「清空回收站」。超过 30 天的条目会自动清理。

Yes. Deleted passwords move to the trash for 30 days. Restore, permanently delete, or empty the trash. Entries older than 30 days are cleaned automatically.

高级配置 / Advanced

如何开启自动保存登录密码？ / How do I enable auto-save?

在密码管理页点击「自动保存设置」按钮，开启「启用自动保存」开关。可选配置域名匹配规则，登录时弹出确认卡片选择「保存」或「暂不保存」。

Click "Auto-save Settings" on the management page and turn on "Enable auto-save". Optionally configure domain rules. A confirmation card appears on login.