adamtpang/youshallnotpassword

🔐 You Shall Not Password

Systematically fix reused and weak passwords with AI assistance

A Chrome extension + MCP server that helps you securely fix password security issues identified by Chrome's Password Checkup feature.

🎯 What It Does

This tool helps you:

1. Analyze your password security systematically
2. Generate strong, unique passwords for each site
3. Guide you through changing passwords step-by-step
4. Track your progress across all passwords that need fixing
5. Save your progress so you can work in batches

🏗️ Architecture

┌─────────────────┐         ┌──────────────┐         ┌─────────────┐
│  Chrome         │ ←──────→│  MCP Server  │ ←──────→│   Claude    │
│  Extension      │   API   │   (stdio)    │  stdio  │   Desktop   │
└─────────────────┘         └──────────────┘         └─────────────┘
        │
        ├─ Reads password security status
        ├─ Generates secure passwords
        ├─ Guides user through updates
        └─ Tracks progress

🚀 Quick Start

Prerequisites

• Node.js 18+ installed
• Chrome browser
• Claude Desktop app (optional, for AI assistance)

1. Install MCP Server

cd mcp-server
npm install

2. Test MCP Server

npm start

You should see: Chrome Password Security MCP Server running on stdio

3. Install Chrome Extension

1. Open Chrome and go to chrome://extensions/
2. Enable "Developer mode" (top right)
3. Click "Load unpacked"
4. Select the chrome-extension folder

You should now see the extension in your toolbar!

4. Configure Claude Desktop (Optional)

Add to your Claude Desktop config:

• Mac: ~/Library/Application Support/Claude/claude_desktop_config.json
• Linux: ~/.config/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "password-security": {
      "command": "node",
      "args": ["/full/path/to/youshallnotpassword/mcp-server/index.js"]
    }
  }
}

📖 How to Use

Method 1: Chrome Extension (Standalone)

1. Click the extension icon in your toolbar

2. Click "Start Fixing Passwords"

3. The extension will:

   • Prioritize by severity (most reused first)
   • Open each site one at a time
   • Generate a strong, unique password
   • Guide you through changing it
   • Track your progress

4. Work through passwords in batches:

   • Fix 5-10 at a time
   • Click "Pause & Save Progress" anytime
   • Resume later from where you left off

Method 2: With Claude via MCP

1. Open Claude Desktop
2. Ask: "Help me fix my reused passwords"
3. Claude will use the MCP server to:
   • Analyze your password security
   • Create a custom migration plan
   • Generate passwords
   • Track your progress
   • Provide personalized advice

🛠️ MCP Tools Available

The MCP server provides these tools for Claude:

analyze_passwords

Analyzes password security and identifies issues.

generate_password

Generates cryptographically secure passwords.

create_migration_plan

Creates a step-by-step plan for fixing passwords.

track_progress

Tracks which passwords have been updated.

get_next_password

Gets the next password to fix based on priority.

🔒 Security Features

• No Plaintext Storage: Passwords are hashed (SHA-256) for comparison
• Cryptographically Secure Generation: Uses Node.js crypto.randomBytes()
• No Cloud Storage: Everything stays local on your machine
• You're Always in Control: The tool guides you, but you make the changes
• Progress Tracking: Encrypted progress storage in Chrome's local storage

📊 Example Workflow

Day 1 (15 minutes):

1. Open extension → "Start Fixing Passwords"
2. Fix top 5 most-reused passwords
3. Click "Pause & Save Progress"

Day 2 (15 minutes):

1. Resume where you left off
2. Fix next 5 passwords
3. Save progress

Continue until complete...

🔮 Future Enhancements

• Direct Chrome Password Manager API integration
• Password Manager Export (1Password, LastPass, etc.)
• Breach Monitoring (Have I Been Pwned)
• 2FA Setup Guidance
• Mobile Sync

📝 License

MIT License - feel free to modify and improve!

🙏 Credits

• Built with Anthropic's MCP SDK
• Inspired by Chrome's Password Checkup feature
• Designed to work seamlessly with Claude

Ready to secure your digital life? Let's fix those passwords! 🚀