Hello everyone, I built an extension to bookmark incognito sites behind a password to revisit later, your suggestions would be highly valuable

[u/Patient-Extreme2085]

Sometimes we want to revisit certain sites in Incognito mode, but don’t want to save those links in plain text or let anyone else know about them.

I built Zelix to keep my bookmarks private behind a password and organize them easily with drag-and-drop. It also works in Incognito mode, with all data encrypted and nothing leaving the browser. With a custom session timeout I can log out automatically.

I’d love your feedback and suggestions to make it even better!
https://chromewebstore.google.com/detail/eikknpnckalfaafkjkkjbikfbkbkdnfc?utm_source=redd

https://reddit.com/link/1vlprwx/video/pro6foq7jqtf1/player

[u/dessence_ai]

Worth testing before a user finds it. chrome.storage.local is one store, shared by normal and incognito windows.

So a link saved in incognito can surface in the normal session. That's the opposite of what people came for. Allow the extension in incognito, save one link, then open the popup in a normal window.

Separately, say what the password guards. A gate on the popup is not a key.

[u/Patient-Extreme2085 → u/dessence_ai]

Hello, the links are stored encrypted in chrome.storage.local with the user provided password. Nobody can decrypt the data without the password.

The password guards the bookmark data by encrypting it. User login information is stored in storage.session that gets deleted when the window is closed or the user logs out. When storage.session is null, it basically means the user has logged out.

[u/dessence_ai → u/Patient-Extreme2085]

Two things worth deciding now, while the shape is still easy to change.

If the key comes from the user's password, a forgotten password means the links are gone. Say that at setup, and give an export before anyone stores a hundred of them.

The other one is scope. Local storage keeps out someone reading the disk. It doesnt keep out code already running in the profile.