# Password derivative extension

> Protect your passwords by ensuring none of them are the same. Easily convert your passwords into unique password derivatives, using non-reversible encryption. Everything is done offline and no state is kept in memory.

Canonical page: [https://chrome-stats.com/d/password-derivative-extension](https://chrome-stats.com/d/password-derivative-extension)

## Overview

- **ID:** `password-derivative-extension`
- **Platform:** Firefox
- **Type:** Firefox add-on
- **Status:** Removed
- **Publisher:** password-derivative
- **Category:** privacy-security
- **Daily users:** 1
- **Version:** 1.3
- **Last updated:** 2022-01-30
- **First published:** 2022-01-17
- **Size:** 108 KB
- **Data as of:** 2022-10-03
- **Store listing:** [Firefox Add-ons Store](https://addons.mozilla.org/firefox/addon/password-derivative-extension/)

## Description

Usage:
Type your password in the password field on the website where you want to logon and then either:
- Right click in the password field and choose 'Encrypt password'.
- Press Ctrl+Space (Command+Space on a Mac) while in the password field.

You can customize the following in options:
- The algorithm used (SHA256, SHA384, SHA512, SHA3, Scrypt)
- The desired size of the derivative.
- The hotkey used to convert the password.
- and more ...

Default algorithm used is BASE64(HMAC512(password, domain)). You can change the algorithm in the plugin options.

Examples:
Domain: <a href="https://outgoing.prod.mozaws.net/v1/f0d52c5afff0d0d7023b5742df55c357d047c941693e2b10272abd0283a0f80f/http%3A//test.com" rel="nofollow">test.com</a>; Password: example; Converted into: UynuCPmZ7WoZ+RC8
Domain: <a href="https://outgoing.prod.mozaws.net/v1/2141eac2eacda036b00afc30fd0a7e6f24e9bddf402cf4393fe5144f468147e8/http%3A//example.com" rel="nofollow">example.com</a>; Password: example; Converted into: 0pCGI0X9TCKfscJ0

Permission usage:
- Display notifications to you: it uses notifications to show when the action was succesfull or failed.
- Access your data for all websites: the program has to read the password field to calculate the derivative.

Other technical permissions:
- Alarms: It uses alarms to clean up the notification in 2 seconds.
- ContextMenus: To add the 'Encrypt password' option.
- Storage: To store the settings of the addon locally in your browser.
- ActiveTab: To let the Ctrl-Space shortcut encrypt the password in the active tab.

The passwords are not stored anywhere and no state other then the configuration is kept. The addon is open source, visit the linked github website to view.

Warning:
Be aware, while more difficult, even these derivatives can be broken if your password is too easy. For optimal security, choose a complex password of a reasonable size and change it at least yearly. For even better security, enable MFA.

## Permissions and access

### Permissions

- `alarms`
- `contextMenus`
- `notifications`
- `storage`
- `activeTab`

### Content script matches

- `<all_urls>`

## Safety

- **Risk impact:** Moderate risk impact
- **Risk likelihood:** High risk likelihood

### Analysis details

- Allows access to all websites, posing a significant security risk as it can monitor and modify data from any visited site.
- This extension is not longer available in the store

> Some risk analysis details are omitted from this free response. [Upgrade to view the full analysis](https://chrome-stats.com/pricing).

## Similar extensions and apps

- [password-derivator](https://chrome-stats.com/d/password-derivator) — 1 users
- [Password Hasher Plus - Password Generator](https://chrome-stats.com/d/password-hasher-plus) — 47 users, 3.25 / 5
- [Domain Password Hasher](https://chrome-stats.com/d/domain-password-hasher)
- [MD5 Lock - Password Securer](https://chrome-stats.com/d/md5-lock) — 1 users, 1.00 / 5
- [Passwords 101](https://chrome-stats.com/d/passwords-101) — 2 users
- [password generator](https://chrome-stats.com/d/wheelofate-password-generator) — 1 users
- [Hash It Out](https://chrome-stats.com/d/hash-it-out)
- [Passume](https://chrome-stats.com/d/passume)
- [E. W. Password Generator](https://chrome-stats.com/d/e-w-password-generator) — 1 users
- [MS Password Generator (WebExtension)](https://chrome-stats.com/d/ms-password-generator) — 1 users
- [PasswordGen](https://chrome-stats.com/d/pwdgen) — 1 users
- [UniquePasswordBuilder Addon](https://chrome-stats.com/d/uniquepasswordbuilder-addon) — 3 users, 5.00 / 5

---

Source: [Chrome-Stats](https://chrome-stats.com/d/password-derivative-extension)