LocalPassMass Documentation

LocalPassMass is a local-only password manager for Google Chrome on Windows. It stores your encrypted vault inside your Chrome profile and does not use a cloud synchronization service or a password storage server.

This guide covers installation, first-time setup, autofill, saving passwords, password history, backups, recovery, password generation, security settings, and safe updates.

Page Information

Field	Value
Title	LocalPassMass Documentation — Installation, Backup & Recovery Guide
Tagline	Install, use, back up, and recover your local Chrome password vault
Short Description	Official documentation for LocalPassMass, a local-only Chrome password manager with encrypted vault storage, autofill, password history, backups, recovery keys, and password generation.
Version	1.2.0
Last Updated	September 10, 2026

What LocalPassMass Does

LocalPassMass keeps your saved credentials in an encrypted vault stored locally in Chrome.

It is designed for people who want the convenience of a browser password manager without storing their password vault on a synchronization server.

The extension supports:

• Username and password storage
• Website-aware autofill
• Subdomain matching
• Password history
• Secure notes
• Password generation
• Password health checks
• Encrypted backups
• Recovery keys
• Automatic locking
• Automatic clipboard clearing
• Manual emergency locking

LocalPassMass does not require an online account to use the vault.

Before You Install

LocalPassMass is currently designed for:

Browser: Google Chrome
Operating System: Windows
Installation type: Chrome unpacked extension
Storage model: Local Chrome storage
Cloud synchronization: Not used

Because your vault is stored locally, keeping a current backup is important.

If your Windows installation, Chrome profile, or storage device is lost or damaged, the local copy of your vault may also be lost.

A good setup is to keep:

1. Your encrypted .svault backup on a trusted external drive.
2. Your Recovery Key in a separate secure location.

Do not keep your only Recovery Key beside your only backup file.

Install LocalPassMass

Download the latest LocalPassMass ZIP package from the official extension page.

Extract the ZIP file to a permanent folder on your computer.

Do not place the extension in a temporary folder or Downloads folder if you regularly clean that directory.

Open Google Chrome and enter:

chrome://extensions

Enable Developer mode in the upper-right corner.

Click Load unpacked.

Select the extracted localpass-extension folder.

LocalPassMass should now appear in your Chrome extensions list.

You can pin it to the Chrome toolbar for faster access.

First-Time Setup

Click the LocalPassMass icon in the Chrome toolbar.

Choose your Master Password and enter it twice.

LocalPassMass does not enforce a specific password format. Numeric passwords and short passwords are allowed, but a longer and unique Master Password provides better protection if someone obtains a copy of your Chrome profile.

After creating the vault, LocalPassMass generates a Recovery Key.

Save the Recovery Key file immediately.

The Recovery Key is intended for restoring an encrypted backup when the normal local installation is no longer available.

Recovery Key

The Recovery Key is a randomly generated key used to recover your encrypted backup.

A typical Recovery Key starts with:

LP1-

Keep this key private.

A practical storage setup is:

• Encrypted backup on an external hard drive
• Recovery Key on a different USB drive, printed copy, or another trusted offline location

Do not email the Recovery Key to yourself or store it next to the backup unless that location is independently protected.

LocalPassMass does not need the Recovery Key for normal daily use.

Unlocking the Vault

When LocalPassMass is locked, click its Chrome toolbar icon.

Enter your Master Password and select Unlock.

The unlocked vault key is kept only for the active browser session.

Restarting Chrome locks the vault again.

You can also configure automatic locking after a period of inactivity.

Lock the Vault Immediately

LocalPassMass includes a manual lock shortcut:

Ctrl + Shift + L

This immediately locks the vault and removes the active session key.

Use this shortcut when leaving your computer unattended.

You can also lock the vault from the extension interface.

Save a Password

When you sign in to a website using credentials that are not already stored, LocalPassMass can show a compact save prompt.

The prompt remains available for approximately 30 seconds.

If the website redirects you to another page on the same site after login, the pending save request can remain available during that period.

Choose Save to add the credential to your vault.

Choose No to dismiss it.

The temporary credential used by this prompt is encrypted while stored in the Chrome session.

Update an Existing Password

If you sign in with a new password for an existing account, LocalPassMass can recognize the change.

When you confirm the update, the new password becomes the current password.

The previous password is kept in Password History instead of being immediately discarded.

This is useful when a website has accepted a password change but you later need to verify or recover the previous credential.

Password History

LocalPassMass can keep up to 25 previous passwords for an account.

To view password history:

1. Open LocalPassMass.
2. Find the saved account.
3. Choose Edit.
4. Confirm that you want to edit the entry.
5. Open Password History.

Previous passwords remain inside the encrypted vault.

You can reveal or copy an older password when needed.

Avoid keeping unnecessary historical passwords forever if they are no longer useful.

Autofill

When LocalPassMass has a saved credential for the current website, click or focus the username or password field.

A compact credential menu appears next to the field.

Select the account you want to use.

LocalPassMass then fills the matching username and password fields.

Autofill is user-triggered. The extension does not automatically submit the login form.

Subdomain Support

LocalPassMass can recognize related subdomains.

For example, a credential associated with:

example.com

can also be offered on:

login.example.com

or:

accounts.example.com

This behavior can be enabled or disabled in Settings.

Domain matching uses an offline Public Suffix List to reduce incorrect matches between unrelated domains.

For example:

evil-example.com

is not treated as a subdomain of:

example.com

Some hosted platforms, such as sites using public suffix services, are also separated more carefully.

HTTP Autofill

Autofill on normal unencrypted HTTP pages is disabled by default.

This is intentional.

Passwords entered over HTTP can be exposed to network interception.

You can enable HTTP autofill from Settings if you understand the risk.

Local development addresses such as localhost may be treated differently.

Recently Used Accounts

If several accounts are stored for the same website, LocalPassMass prioritizes useful entries based on factors such as favorites and recent use.

This keeps frequently used accounts closer to the top of the credential menu.

Add a Password Manually

Open LocalPassMass and go to the Vault tab.

Select the plus button.

Enter:

• Title
• Website URL
• Username or email
• Password
• Optional secure note
• Favorite status

Choose Save.

If the password appears weak or is already used by another stored account, LocalPassMass can warn you before saving it.

The warning does not prevent you from continuing.

Password Reuse Warning

Reusing the same password across multiple websites increases the impact of a compromised account.

LocalPassMass checks password reuse locally inside your vault.

If a password matches one already used by another entry, you may see a warning before saving it.

This comparison is performed locally.

Password Health

Open:

Settings → Password Health

LocalPassMass checks the vault for:

• Reused passwords
• Basic weak-password patterns
• Old passwords

The analysis is performed locally.

Password Health is intended as a practical warning system rather than a complete password-strength audit.

Password Generator

Open the Generator tab.

Choose the desired password length.

Supported length:

4–128 characters

You can include or exclude:

• Uppercase letters
• Lowercase letters
• Numbers
• Symbols

Choose Generate New Password to create another password.

For important accounts, longer unique passwords are generally preferable to short memorable passwords.

Copying Passwords

You can copy a password directly from the vault.

LocalPassMass can automatically clear the clipboard after a configurable delay.

The default behavior helps reduce the amount of time a copied password remains available to other applications.

You can change the clipboard timeout in Settings.

Copying Usernames

The Vault list includes a quick username copy action.

This lets you copy the username or email without opening the full account editor.

Secure Notes

Each saved credential can include a secure note.

Notes are stored inside the encrypted vault together with the account information.

Use secure notes for small pieces of account-related information.

Avoid using the notes field as a replacement for a dedicated encrypted file storage system.

Create a Backup

Open:

Settings → Export Backup

LocalPassMass creates a file with the .svault extension.

The exported backup contains encrypted vault data.

Your usernames and passwords should not appear as readable plain text when the file is opened with a normal text editor.

Store the backup somewhere reliable.

For a local-only password manager, backup quality is part of your security plan.

Backup Reminder

LocalPassMass can remind you when a backup may be needed.

A reminder may appear when:

• No backup has been created yet
• Several vault changes have occurred since the last backup
• The most recent backup is old

The reminder is local and does not upload or synchronize the backup.

Restore a Backup

To restore a LocalPassMass vault, you need:

• The .svault backup file
• The matching Recovery Key
• A new Master Password for the restored installation

Open the recovery option from the initial LocalPassMass screen.

Select the backup file.

Select or provide the Recovery Key.

Choose a new Master Password.

LocalPassMass verifies the Recovery Key and decrypts the vault locally.

If the Recovery Key does not match the backup, recovery fails.

Backup Compatibility

LocalPassMass 1.2.0 exports the newer LocalPassMass backup format.

It can also restore supported backups created by earlier LocalPass versions.

This compatibility is intentionally maintained so existing users can upgrade without rebuilding their vault.

Change the Master Password

Open:

Settings → Change Master Password

Enter your new Master Password.

Changing the Master Password does not require recreating every stored credential.

The vault encryption key is protected again using the new password-derived key.

A Master Password cannot be empty.

Create a New Recovery Key

Open:

Settings → New Recovery Key

Confirm the action.

LocalPassMass generates a new Recovery Key.

Save the new Recovery Key immediately.

New backups will depend on the current recovery setup, so keep your recovery materials organized and clearly dated.

Update LocalPassMass Without Losing Your Vault

If you installed LocalPassMass using Load unpacked, do not remove the existing extension before updating unless you already have a tested backup.

First create a fresh backup.

Download and extract the new version.

Replace the files inside the same extension directory currently used by Chrome.

Then open:

chrome://extensions

Find LocalPassMass and click Reload.

Confirm that the expected version number is displayed.

Using the same extension installation preserves access to the existing Chrome local storage.

Loading the extension from a completely different installation may result in a different extension identity and an apparently empty vault.

Moving to Another Computer

Before moving LocalPassMass to a new Windows installation or computer:

1. Export a fresh .svault backup.
2. Confirm that you still have the correct Recovery Key.
3. Store both items separately.
4. Install LocalPassMass on the new Chrome installation.
5. Use the recovery workflow.
6. Create a new Master Password.
7. Verify several important accounts before deleting the old installation.

Do not wipe the original machine until you have confirmed that the restored vault works.

Settings

LocalPassMass currently provides settings for:

Auto Lock
Controls how long the vault may remain unlocked without activity.

Clipboard Clear Time
Controls how long copied credentials remain on the clipboard.

Subdomain Support
Allows credentials to be suggested on related subdomains.

Save Prompt
Controls whether LocalPassMass offers to save new login information.

HTTP Autofill
Controls whether autofill is permitted on unencrypted HTTP pages.

Where Is My Vault Stored?

The active LocalPassMass vault is stored inside Chrome extension storage on your local computer.

The stored vault payload is encrypted.

However, local-only does not mean indestructible.

Removing the Chrome profile, uninstalling Windows, deleting browser data, disk failure, profile corruption, or accidentally removing the wrong extension installation may make the local copy unavailable.

This is why encrypted backups are important.

Does LocalPassMass Send My Passwords to inaser.ir?

No password synchronization or vault storage is performed through inaser.ir.

Links to the LocalPassMass website, documentation, download page, and GitHub repository are normal links in the Settings interface.

Those pages are opened only when you choose to visit them.

The extension does not attach your vault, passwords, Recovery Key, or usernames to those links.

Does LocalPassMass Work Without Internet?

Yes.

Core vault functions are designed to work without an Internet connection, including:

• Unlocking the vault
• Reading saved credentials
• Password generation
• Password Health
• Password History
• Backup creation
• Backup recovery

A website obviously requires its own network connection if you want to sign in to that website.

Opening documentation, GitHub, or download links also requires Internet access.

What Local-Only Protects Against

A local-only design removes the need to place your password vault on a third-party synchronization server.

It also removes server-side account recovery and cloud synchronization from the normal vault workflow.

This can reduce certain remote attack surfaces.

It does not protect against every type of attack.

What LocalPassMass Cannot Protect Against

No browser extension can guarantee password secrecy when the computer itself is compromised.

Examples include:

• Malware running on Windows
• Keyloggers
• Malicious screen capture software
• Browser debugging while the vault is unlocked
• A malicious extension with sufficient privileges
• Physical access to an unlocked computer

Keep Windows and Chrome updated and avoid installing untrusted software or extensions.

Master Password Security

LocalPassMass allows simple Master Passwords because some users prefer a short local PIN.

That convenience has a tradeoff.

If an attacker obtains the entire Chrome profile and your Master Password is very short, offline guessing may be easier.

For stronger protection, use a Master Password that is:

• Unique
• Long enough to resist guessing
• Not reused on another website

Your exported backup has a separate recovery design and should be protected by keeping the Recovery Key private.

Recommended Backup Routine

For regular use, a simple routine works well:

After important vault changes: create a fresh backup.

Keep at least two copies: preferably on different physical storage devices.

Keep the Recovery Key separately: losing both the active vault and Recovery Key can make recovery impossible.

Test recovery occasionally: a backup you have never tested should not be your only recovery plan.

Troubleshooting Autofill

If the credential menu does not appear:

Confirm that the vault is unlocked.

Check that the saved URL belongs to the current website.

Click directly inside the username or password field.

Check whether Subdomain Support is enabled if the login page uses a different subdomain.

If the website uses HTTP, check the HTTP Autofill setting.

Some websites use unusual custom login components rather than standard HTML input fields. These pages may require specific compatibility work.

Troubleshooting After an Update

If your vault appears empty after updating an unpacked installation, do not immediately create a new vault.

Check whether you loaded the extension from a different directory.

Open chrome://extensions and compare the current installation with the previous one.

If the old installation still exists, open it and create a backup.

Then restore that backup into the intended installation.

Removing LocalPassMass

Before removing the extension, create a current backup and confirm that you have its Recovery Key.

Removing an unpacked extension or deleting its Chrome storage may remove access to the local vault.

Do not rely on the extension directory itself as your only backup.

Official Links

LocalPassMass Page
https://inaser.ir/extensions/LocalPassMass

Documentation
https://inaser.ir/documents/LocalPassMass

GitHub Repository
https://github.com/n4ser/LocalPassMass

Developer Website
https://inaser.ir

Version

Current documentation version:

LocalPassMass 1.2.0

Last updated:

September 10, 2026