# Geslar

> Free password manager — vault for passwords, TOTP 2FA, auto-fill, passphrase generator and breach checking.

Canonical page: [https://chrome-stats.com/d/geslar](https://chrome-stats.com/d/geslar)

## Overview

- **ID:** `geslar`
- **Platform:** Firefox
- **Type:** Firefox add-on
- **Status:** Available
- **Publisher:** Geslar.app
- **Category:** privacy-security
- **Version:** 3.4.2
- **Last updated:** 2026-07-27
- **First published:** 2026-03-24
- **Size:** 855 KB
- **Data as of:** 2026-09-15
- **Store listing:** [Firefox Add-ons Store](https://addons.mozilla.org/firefox/addon/geslar/)
- **Website:** [https://geslar.app](https://geslar.app/)

## Description

🔐 GESLAR — Free Password Manager from Croatia
Geslar is a completely free password manager that keeps all your passwords, cards, and TOTP keys encrypted on your device. No cloud. No account. No tracking.

What's new in 3.2.3
🔐 Permissions are consistently enforced — the extension shows and enables only what you're entitled to.
👪 Family vault — moving, copying and deleting now work correctly from the extension.
🔒 More reliable unlocking according to your lock setting.
✨ Clearer account/device messages and minor UI polish.

What's new in 3.2.2
- Business (shared) vaults — full support: view and edit (add/edit/delete) while respecting your permissions.
- New context switcher — two-level (organization → vault), Family in the personal section, search across all vaults at once.
- Folders in shared vaults and collections + move-to-folder from the menu.
- Bulk actions — multi-select, copy/move between vaults, favorites, select-all.
- Per-entry password health + guided password change from the report.
- More precise autofill — multiple URLs per login with per-URL matching.
- New filters — "Favorites" and "Has TOTP".
- Clear access messages when org policy blocks an action (2FA required, plan, restriction).
- More private site icons (Geslar proxy, respects your setting).
- More reliable sync — safe cross-device deletion, faster bulk sync, full password history, shared-vault key self-heal.

✅ WHY GESLAR?
• No user account — you don't even need an email
• No cloud — your data stays on your device
• No telemetry — zero tracking, zero cookies
• Free — all features, no limitations
• Croatian-made — full localization

🔑 FEATURES
• AES-256-GCM encryption with PBKDF2 (600,000 iterations)
• One-click password autofill or Ctrl+Shift+L
• TOTP 2FA generator (SHA-1, SHA-256, SHA-512)
• Passkey support (WebAuthn)
• Import from 13 password managers and browsers
• Export in 3 formats
• Secure Send — share passwords via encrypted link
• Password breach check via HIBP (k-Anonymity)
• Password and passphrase generator

🔤 CROATIAN PASSPHRASE GENERATOR
• Passphrases made of Croatian or English words — easy to remember, hard to crack
• 8 Croatian dialects + metaphors, English EFF Diceware (7,776 words) + idioms
• HR/EN phrase language toggle with automatic option adjustment
• Password generator with 4 complexity levels and presets
• Avoid ambiguous characters (l, I, 1, O, 0) for more readable passwords
• HIBP breach check (k-Anonymity — your full password is never sent)

🛡 SECURITY
• Zero-knowledge architecture
• Master key stored in RAM only
• PIN unlock with lockout protection
• Closed shadow DOM isolation
• Content Security Policy protection
• GDPR compliant — data controller based in Croatia

⌨ SHORTCUTS
• Ctrl+Shift+G — open Geslar
• Ctrl+Shift+L — autofill on the current page

Made in Croatia for users who see privacy as a right, not an option.

## Rankings

- #145,164 — Overall

## Permissions and access

### Permissions

- `clipboardWrite`
- `activeTab`
- `scripting`
- `storage`
- `unlimitedStorage`
- `alarms`
- `idle`
- `contextMenus`
- `notifications`

### Content script matches

- `*`

## Safety

- **Risk impact:** High risk impact
- **Risk likelihood:** High risk likelihood

### Analysis details

- Allows access to all websites, posing a significant security risk as it can monitor and modify data from any visited site.
- This extension has low user count. Unpopular extensions may not be stable or safe.

> Some risk analysis details are omitted from this free response. [Upgrade to view the full analysis](https://chrome-stats.com/pricing).

## Similar extensions and apps

- [T-Vault Password Manager](https://chrome-stats.com/d/t-vault-password-manager) — 1 users
- [Passa - Password Manager](https://chrome-stats.com/d/passa-password-manager) — 1 users
- [Password Manager](https://chrome-stats.com/d/sandpass) — 6 users
- [Passy - Password Manager Browser Extension](https://chrome-stats.com/d/passy) — 16 users, 5.00 / 5
- [ClawGuard Password Manager](https://chrome-stats.com/d/clawguard-password-manager)
- [UnveilPass Manager](https://chrome-stats.com/d/unveilpass-manager) — 1 users
- [Passify - Password Manager](https://chrome-stats.com/d/passify-password-manager) — 1 users
- [SecurePass Pro - Password Manager](https://chrome-stats.com/d/securepass-pro-passwordmanager) — 1 users
- [Peach Password Manager](https://chrome-stats.com/d/peachpasswords) — 1 users
- [Northguard Password Manager](https://chrome-stats.com/d/northguard-password-manager) — 5 users
- [NordPass® Password Manager & Digital Vault](https://chrome-stats.com/d/nordpass-password-management) — 135,985 users, 4.01 / 5
- [Encryptio Password Manager](https://chrome-stats.com/d/encryptio-password-manager)

---

Source: [Chrome-Stats](https://chrome-stats.com/d/geslar)