# cout970-password-manager

> A browser extension that derives your passwords instead of storing them.

Canonical page: [https://chrome-stats.com/d/cout970-password-manager](https://chrome-stats.com/d/cout970-password-manager)

## Overview

- **ID:** `cout970-password-manager`
- **Platform:** Firefox
- **Type:** Firefox add-on
- **Status:** Available
- **Publisher:** cout970
- **Category:** privacy-security
- **Daily users:** 1
- **Version:** 3.0.1
- **Last updated:** 2026-08-12
- **First published:** 2026-08-09
- **Size:** 147 KB
- **Data as of:** 2026-09-06
- **Store listing:** [Firefox Add-ons Store](https://addons.mozilla.org/firefox/addon/cout970-password-manager/)
- **Privacy policy:** [https://addons.mozilla.org/firefox/addon/cout970-password-manager/privacy/](https://addons.mozilla.org/firefox/addon/cout970-password-manager/privacy/)

## Description

A browser extension that <strong>derives</strong> your passwords instead of storing them.

Every password is recomputed from your master password and a short service code whenever you need it. The vault holds
the recipe, the alphabet, the length, the algorithm, never the password itself. Nothing to leak, and the same master
password on a fresh install regenerates exactly the same passwords.

For the things you cannot regenerate, recovery codes, PINs, API keys, TOTP seeds, the vault stores the value encrypted
with AES-256-GCM instead.

<code>master password + service code + alphabet + length ──PBKDF2-SHA-512──&gt; password
</code>

Derivation is <code>v3</code> (PBKDF2-SHA-512, 100 000 iterations). Modes <code>v0</code>, <code>v1</code> and
<code>v2</code> still exist so vaults exported by older versions keep generating the same passwords; new items always use <code>v3</code>.

An <strong>alphabet</strong> is the ordered set of characters a password is drawn from. Order is part of the derivation, so editing
an alphabet changes every password made from it, the UI warns before letting that happen. Built-in alphabets are
immutable for the same reason; duplicate one to make your own.

Items live in <strong>groups</strong>, and each group has its own master password. One group is nominated to encrypt the vault file
itself.

<ul><li>The master password is never written to disk. While you are using the extension it lives in <code>storage.session</code> (memory
  only), and is forgotten after five minutes of inactivity.</li><li>The vault file is a single AES-256-GCM blob keyed by PBKDF2-SHA-512.</li><li>Passwords are derived on demand, in the popup, and never sent anywhere.</li><li>The remote copy is optional and only ever receives the already-encrypted export. The service stores an opaque blob and
  cannot decrypt it.</li><li>Copied passwords are cleared from the clipboard after a configurable delay, best-effort while the popup is open.</li></ul>
Source code available on Github <a href="https://prod.outgoing.prod.webservices.mozgcp.net/v1/03fd0f7e1befec51bcec05d7540f00b54513300ecc4cb0a8a3630653c6ba58df/https%3A//github.com/cout970/PasswordManagerExtension" rel="nofollow">https://github.com/cout970/PasswordManagerExtension</a>

## Rankings

- #127,579 — Overall

## Permissions and access

### Permissions

- `storage`
- `activeTab`
- `clipboardWrite`

## Safety

- **Risk impact:** Low risk impact
- **Risk likelihood:** High risk likelihood

### Analysis details

- Allows reading and modifying clipboard content, which can be sensitive, posing a moderate privacy risk.
- This extension was recently updated in the past month. New updates may not be stable or safe.

> Some risk analysis details are omitted from this free response. [Upgrade to view the full analysis](https://chrome-stats.com/pricing).

## Similar extensions and apps

- [E. W. Password Generator](https://chrome-stats.com/d/e-w-password-generator) — 1 users
- [password-derivator](https://chrome-stats.com/d/password-derivator) — 1 users
- [PasswordVault](https://chrome-stats.com/d/passwordvault)
- [VaultKey](https://chrome-stats.com/d/vaultkey) — 5.00 / 5
- [Passwords 101](https://chrome-stats.com/d/passwords-101) — 2 users
- [VMP Pass Password Manager & Digital Vault](https://chrome-stats.com/d/vmpro-password-manager) — 1 users
- [WebVault](https://chrome-stats.com/d/webvault) — 1 users
- [T-Vault Password Manager](https://chrome-stats.com/d/t-vault-password-manager) — 1 users
- [Vaultic](https://chrome-stats.com/d/vaultic)
- [Password derivative extension](https://chrome-stats.com/d/password-derivative-extension) — 1 users
- [PassShield](https://chrome-stats.com/d/passshield) — 1 users
- [Password Manager](https://chrome-stats.com/d/password-manager-zk256)

---

Source: [Chrome-Stats](https://chrome-stats.com/d/cout970-password-manager)