Privacy policy

Show my Password does not collect, send or sell any data, and it has no analytics.

• The add-on makes no network requests of its own. There is no account, no server and no sync.
• It looks at the password fields of the pages you open, to add its buttons, fill the login you pick and offer to save the one you type. Page content is not stored or sent.
• Stored in the add-on's local storage, and removed when you uninstall it: your settings and, if you create it, the vault. The vault is always encrypted (AES-256-GCM, key derived from your master password with PBKDF2-SHA256, 600,000 iterations). Your master password is never stored, and nobody, including me, can recover it.
• Kept in memory only, and gone when the browser closes: the key of the unlocked vault and a password waiting to be saved.
• Backups and exports are files that you create and keep. The encrypted backup needs your master password; the CSV file contains your passwords in clear text, and the add-on warns you before creating it.

The “Buy me a coffee” link in Settings is an ordinary link to PayPal that you choose to open.

Contact: Francesco De Stefano, through the SourceForge project.