# Stable Pass

> Derive strong, unique passwords from a simple one — nothing stored, nothing sent.

Canonical page: [https://chrome-stats.com/d/stable-pass](https://chrome-stats.com/d/stable-pass)

## Overview

- **ID:** `stable-pass`
- **Platform:** Firefox
- **Type:** Firefox add-on
- **Status:** Available
- **Publisher:** Leo Durillon
- **Category:** privacy-security
- **Version:** 0.0.1
- **Last updated:** 2026-05-07
- **First published:** 2026-05-04
- **Size:** 463 KB
- **Data as of:** 2026-09-15
- **Store listing:** [Firefox Add-ons Store](https://addons.mozilla.org/firefox/addon/stable-pass/)
- **Website:** [https://github.com/LeoDurillon/StablePass](https://github.com/LeoDurillon/StablePass)

## Description

Stable Pass derives a strong, unique password for every website
from a single simple password you already know — no vault, no
account, no data ever leaving your browser.

HOW IT WORKS

Focus any password field on any page. Type your simple password.
Press Tab. Stable Pass instantly replaces it with a 22-character
strong password that is unique to that website and to you.

The same simple password always produces the same strong password
for the same site — so you never need to store or remember it.
Every site gets a different one, and no two users ever get the
same result.

FEATURES

• Works on every password field on every page automatically
• 22-character output guaranteed to contain uppercase, lowercase,
  digits, and special characters
• Per-site passwords — changing your password on one site never
  affects any other
• Version counter — if a site forces you to change your password,
  use the extension popup to increment the version and get a
  fresh strong password without changing your simple one
• Cross-device — your settings sync via your browser's built-in
  sync, so the same passwords are available on all your devices

PRIVACY & SECURITY

• Nothing is sent to any server — all derivation happens locally
  in your browser using the Web Crypto API
• No account required
• The only data stored is a random secret (unique to you) and
  per-site version counters, kept inside your own browser sync
  storage — never accessible to the developer

⚠ Important: back up your user secret from the extension popup.
If you uninstall the extension and your browser sync is
unavailable, the secret cannot be recovered and your previously
derived passwords would be unrecoverable.

## Rankings

- #146,916 — Overall

## Permissions and access

### Permissions

- `storage`
- `activeTab`

### Content script matches

- `<all_urls>`

## Safety

- **Risk impact:** Moderate risk impact
- **Risk likelihood:** High risk likelihood

### Analysis details

- Allows access to all websites, posing a significant security risk as it can monitor and modify data from any visited site.
- This extension has low user count. Unpopular extensions may not be stable or safe.

> Some risk analysis details are omitted from this free response. [Upgrade to view the full analysis](https://chrome-stats.com/pricing).

## Similar extensions and apps

- [Passume](https://chrome-stats.com/d/passume)
- [Passwords 101](https://chrome-stats.com/d/passwords-101) — 1 users
- [Secure Pass](https://chrome-stats.com/d/cga-secure-pass)
- [SecurePass](https://chrome-stats.com/d/securepass)
- [Password Generator Advance](https://chrome-stats.com/d/password-generator-advance)
- [Smart Password Generator](https://chrome-stats.com/d/smart_password_generator) — 2 users, 1.00 / 5
- [MS Password Generator (WebExtension)](https://chrome-stats.com/d/ms-password-generator) — 1 users
- [Vaultless Pass](https://chrome-stats.com/d/vaultless-pass)
- [PassForge](https://chrome-stats.com/d/passforge) — 1 users
- [PassShield](https://chrome-stats.com/d/passshield) — 1 users
- [Secure Passwords](https://chrome-stats.com/d/secure-asswords) — 15 users, 4.50 / 5
- [Constant PassGen](https://chrome-stats.com/d/constant-passgen) — 3 users

---

Source: [Chrome-Stats](https://chrome-stats.com/d/stable-pass)