枢密密码管理器 作者： 朱家佑

枢密密码管理器是一款采用零知识加密架构的安全密码管理扩展，采用AES-256-GCM加密算法，所有密码在本地加密后上传，服务器无法查看明文。支持智能自动填充、自动保存与更新、密码生成、弱密码检查等功能。

🔐 零知识加密架构
采用 AES-256-GCM 高级加密算法，所有密码在本地加密后上传，服务器无法查看明文。主密码由用户自行保管，完全掌控数据安全。具备 CSRF 防护机制，防止跨站请求伪造攻击。

✨ 智能自动填充
自动检测网页登录表单和密码输入框，一键填充用户名和密码，支持 iframe 内嵌表单填充。提供快捷键 Ctrl+Shift+F 快速填充，让登录更便捷。

📝 自动保存与更新
自动识别新密码并智能提示保存，检测密码变更并提示更新已有记录。支持智能分类管理密码，可自定义分类和添加备注信息、标签。

🔑 强大密码生成器
支持自定义密码长度（8-64位），可选择包含大写字母、小写字母、数字、特殊符号。一键生成高强度随机密码，快捷键 Ctrl+Shift+P 快速生成并复制到剪贴板。

🛡 弱密码检查
实时检测密码强度（弱/中等/强），多维度评估：长度、大小写、数字、特殊字符。注册时自动显示密码强度指示器，帮助用户创建更安全的密码。

☁ 多端同步
支持浏览器插件和网页端数据同步，本地加密，云端存储加密密文。自动同步机制保持数据最新，支持多设备同时使用。

⚙ 灵活权限控制
默认仅申请访问官方网站权限，用户可通过"全自动模式"开关控制权限。开启后申请访问所有网站以实现自动填充，权限可随时撤销，安全可控。

隐私保护承诺：
所有密码数据本地加密处理，不收集用户浏览历史，服务器仅存储加密后的密文。零知识架构确保即使服务器被入侵也无法获取明文密码。

Shumi Password Manager is a secure password management extension with zero-knowledge encryption architecture. Using AES-256-GCM encryption, all passwords are encrypted locally before upload, and the server cannot access plaintext. Features include smart auto-fill, auto-save & update, password generation, and weak password detection.

🔐 Zero-Knowledge Encryption
Advanced AES-256-GCM encryption algorithm. All passwords encrypted locally before upload, server cannot access plaintext. Master password controlled entirely by user. CSRF protection against cross-site request forgery.

✨ Smart Auto-Fill
Auto-detect login forms and password fields on webpages. One-click fill for usernames and passwords. Support for iframe embedded form filling. Keyboard shortcut Ctrl+Shift+F for quick fill.

📝 Auto-Save & Update
Auto-detect new passwords and prompt to save. Detect password changes and prompt to update existing records. Smart category management with custom categories, notes, and tags support.

🔑 Powerful Password Generator
Customizable password length (8-64 characters). Options for uppercase, lowercase, numbers, and special characters. One-click generate strong random passwords. Keyboard shortcut Ctrl+Shift+P to generate and copy to clipboard.

🛡 Weak Password Detection
Real-time password strength detection (Weak/Medium/Strong). Multi-dimensional evaluation: length, case, numbers, special characters. Password strength indicator during registration to help users create secure passwords.

☁ Multi-Device Sync
Sync between browser extension and web app. Local encryption with encrypted cloud storage. Auto-sync mechanism to keep data up-to-date. Support multiple devices simultaneously.

⚙ Flexible Permission Control
Default permission only for official website. Users control permissions via "Auto Mode" toggle. Request all websites permission when auto mode enabled. Permissions can be revoked at any time.

Privacy Commitment:
All password data encrypted locally. No browsing history collection. Server only stores encrypted ciphertext. Zero-knowledge architecture ensures plaintext safety even if server compromised.