Open Source · GPL-3.0 · No Account
$0 Free Forever
Every feature, every update, every user — completely free. No premium tier, no subscriptions, no account required. Password data stays on your machine.
∞
Users, No Sign-up
0%
Cloud share — password data stored locally
$0
Per Month, Forever
All Features Included
Everything below ships out of the box — nothing is locked behind a paywall
Security
7 capabilities-
AES-256-GCM local encryption · PBKDF2 with
600,000iterations - Flexible session control — idle auto-lock, restart lock, one-click lock
- Persistent session countdown with click-to-renew badge
- Offline security audit — 0-100 score weighted across 4 dimensions (weak / reused / leaked / expired), no-2FA listed separately
- Built-in TOTP 2FA (RFC 6238) with live codes and QR import
- Password generator — random passwords + passphrases from a bundled 3,080-word list, live strength meter
- Clipboard auto-clear — copied passwords expire on a configurable timer
Smart Autofill
7 capabilities-
Quick fill
Ctrl+Shift+F— only fills credentials; pair it with "Fill and sign in" to tick consent and submit - Quadruple fill strategy — inline icon / side panel / right-click menu / global shortcut
- Site rules — custom username / password field selectors per domain for login pages heuristic detection gets wrong (typically Web Components sites), with open shadow-root penetration on by default
- Exact domain matching keeps dev / test / staging / prod accounts separate
- Three cross-subdomain tiers — exact match only by default, widenable to wildcard entries or same main domain; the auto-save duplicate rule is tier-independent and localhost / 127.0.0.1 stays port-separated
- Chrome-style auto-save with smart dedup and domain allow/blocklist
- Broad compatibility — dynamic form detection (incl. cross-iframe), password visibility toggle
Data Management
6 capabilities- Import / export — CSV & JSON (Chrome / LastPass / Bitwarden / 1Password)
- Encrypted backup (.aph) + email backup + scheduled reminders
- 30-day trash + password change history (restorable encrypted snapshots)
- Tags & filtering, favorites, one-click dedup, batch delete / retag, export selected entries
- Personal info vault — IDs and bank cards in a separately encrypted store (whole-blob AES-256-GCM), masked by default and gated by a master-password re-check, .aphid encrypted backup export / import, not covered by automatic backups
- Atomic re-key on master password change — no data loss
Experience
5 capabilities- 6 color themes + bilingual UI (中文 / English), applied everywhere instantly
- Smart search — pinyin / initials matching with highlight
-
Command palette —
Ctrl/Cmd+Kon the manager page filters 30 commands by Chinese, pinyin or initials, Enter to run - Site favicons from local browser cache — zero external requests
-
Instant side panel — ~
20-50mscached fast path
Platform & Engineering
4 capabilities- Runs on Chrome / Edge / Brave — Chromium-based
- Works offline — no network calls except update checks
- Update checks every 6h with in-popup notification
- Open and auditable (GPL-3.0) — every crypto line reviewable
How free is "free"?
Side by side with common choices (public pricing, as of Sep 2026)
| Dimension | Account Password Helper | Bitwarden | 1Password | Chrome Built-in |
|---|---|---|---|---|
| Price | Completely free | Free / from $10/yr | $2.99/mo | Free |
| Data storage | Local-only | Cloud | Cloud | Local |
| Account required | No | Yes | Yes | No |
| One-click login (fill+tick+submit) | Yes | Fill only | Fill only | Fill only |
| Multi-environment isolation | Yes (3 subdomain tiers) | No | No | No |
| Site rules (custom selectors) | Yes | No | No | No |
| Built-in TOTP | Built-in | Paid tier $10/yr | Paid tier | None |
| Offline security audit | Built-in | None | None | None |
| Open source (GPL-3.0) | Yes | Yes | No | No |
Third-party data comes from public pricing pages and may change over time; this table illustrates pricing models, not a full product evaluation.
Cloud
None — password data stays on your machine, nothing uploaded
Subscription
None — no recurring fees, no premium tier
Account Required
No — start using immediately
Support
Community — GitHub Issues + WeChat group
Account Password Helper is and will always be 100% free. There is no paid tier, no premium features, and no subscription. All features are available to all users from day one.