Passwords never stored: recomputed from your master key. Optional vault and encrypted sync. Same passwords on every device.
Users
2
−1 in 30 days
Rating
0.0 / 5
unchanged in 30 days
Ratings
0
0 in 30 days
Store rank
#368K
#277K among extensions
Version
3.0.1
updated 29 Sep 2026
Users
monthly, 13 months
Latest, 15 Oct 2026:2 usersMove the mouse over the chart for any month
Ratings count
monthly, 13 months
Latest, 15 Oct 2026:0 ratingsMove the mouse over the chart for any month
The Chrome Web Store rounds user counts down to the leading digit, so the user line moves in steps. The ratings count is exact and is the better signal of real adoption.
About TheCode
TheCode is a password manager that stores none. Each password is recomputed in your browser, on demand, from a master key only you know and the name of the site.
ONE KEY. ONE PASSWORD PER SITE.
• Same key + same site = exactly the same password, on every device.
• Different sites = unrelated passwords.
• Nothing to steal: no password is saved, neither in the browser nor on a server.
The derivation (PBKDF2 with 600,000 iterations, then HMAC-SHA256) is documented, tested and reproducible: your passwords do not depend on a service staying alive.
FEATURES
• The password for the open site, computed in one click from the toolbar
• Offered right next to password fields, for the username typed on the page
• Vault: remember each site's username, length and characters — never the password
• Vault locked by your master key
• Length from 4 to 40 characters, choice of lowercase, uppercase, digits, symbols
• Default settings remembered, and shared across your devices if you have an account
• Vault transfer to your other devices through an encrypted QR code
• Automatic, end-to-end encrypted sync, optional
• Sign in with Google or with an email address
• No ads, no trackers, no analytics
PRIVACY
• Your master key never leaves your device; it is wiped when the browser closes.
• Without an account, the extension contacts no server: everything works offline.
• With an account, the vault is encrypted in the browser before it is sent: the server sees neither your sites nor your usernames.
• Page content is never stored or sent.
• Open source under the Apache 2.0 licence.
EVERYWHERE, WITH THE SAME KEY
TheCode also comes as a mobile and desktop app, and on the website thecode.julsql.fr. The same key gives you back the same passwords everywhere, even without sync.
FREE
Generation, the vault and filling are free and unlimited. A free account syncs a few entries across three devices; the complete plan, on thecode.julsql.fr, lifts those limits.
HOW IT WORKS
1. Pick a long master key and remember it: it cannot be recovered.
2. Open a site and click the TheCode icon, or the suggestion next to the password field.
3. The password appears: insert it or copy it.