On this page
A password list can hide two problems: a weak password and the same password used for several accounts. The Off Grid AI extension can show a Security check from the Vault in OGAD (Off Grid AI Desktop). Use it to choose which real account to improve first.
| Download OGAD | Get beta 114 |
What would you like to do with Off Grid AI?
Have a feature or use case you would like us to support? Tell us what you want to do and which device you use.
Write to support@offgridmobileai.co, join our Slack community, or talk to us on Reddit.
What does the check tell you?
The check reports weak passwords, groups of reused passwords, and passwords not changed for a long time. It also shows a score. These are ways to inspect saved entries. They do not prove that an account was breached or that every possible password attack was checked.
A reused password matters because the same secret protects more than one account. A weak password can be easier to guess. Age alone does not show that a password is compromised. Review the account and its actual requirements before changing a value.
Vault is a Pro feature. The desktop must be paired and unlocked for the browser to receive the audit. This workflow does not require an AI model to reason over your secrets.
Install and connect the browser extension
The extension needs Node.js 20 or later for a source build. It is not listed in the browser stores in this setup. Downloading the source and dependencies needs internet.
git clone https://github.com/off-grid-ai/browser-extension.git
cd browser-extension
git checkout 970fec49e2a630a3e1f419c1fc86df241891d40c
npm install
npm run build:chrome
In Chrome, open chrome://extensions, enable Developer mode, select Load unpacked, and choose dist/chrome. Start OGAD and select a downloaded local text model. Open the extension from the toolbar. Its default desktop connection is http://127.0.0.1:7878/v1 on the same computer.
For shared chats, desktop tools, or Vault, open the extension’s Settings > Desktop and select Pair with desktop. Check that the six words match the dialog in OGAD, then approve there. A running gateway and an approved pairing serve different purposes.
The pinned extension source includes the browser connection used here. Later source changes can alter the setup.
Open the audit
- Unlock Vault in OGAD.
- Open the paired extension’s Vault screen.
- Select Vault tools > Security check.
- Review the weak entries and reused-password groups.
- Open an entry to identify the account you want to improve.
Start with one reused group. Identify each website and username before changing anything. Similar entry titles can refer to different accounts, and an old saved entry may no longer be used.
Fix the real account, then its saved entry
Choose an account you still use. Open its normal website and follow its password-change procedure. Create a unique password that meets the site’s rules. Confirm that the site accepts it, then update the correct saved Vault entry.
Do not change only the Vault value. That would leave the real account using the old password and make your saved login wrong. Keep the account change and the saved-entry update together.
After updating, check a normal sign-in and run Security check again. The reused group should no longer include that changed value once the saved data is current. If it still appears, inspect duplicate entries before repeating a change.
Work through the remaining active accounts one at a time. You can make progress without trying to repair every old record in one sitting. Keep a note of accounts that need a separate recovery step.
How should you use the score?
Use the score to guide review, not as a security guarantee. A high score cannot tell you whether a website has poor account controls, whether someone has an active session, or whether an important account has extra protection enabled.
The weak-password check evaluates what is stored. It cannot correct an entry you never saved, determine whether a password-change attempt succeeded on the website, or rotate the website’s password for you.
If an old entry is no longer needed, identify it carefully before removing it. Keep the recovery material you need for active accounts. Deleting a Vault entry does not close its account.
What if the check is empty or unavailable?
Check the paired desktop and unlocked Vault first. An empty list can mean there are no saved logins in the selected scope; it does not prove that your other accounts are protected. If the desktop locks during review, return to OGAD to unlock it.
Keep audit results private. Account names and reused groups can reveal useful information even when passwords are not displayed. Lock Vault when you finish and avoid sharing screenshots with secret values visible.
This guide covers OGAD beta 0.0.55-beta.114. The release and build record identify the desktop version and its included Pro code. Setup details follow that code; they are not a device test.
Download OGAD, open the Vault security check, and replace one reused password on its real website before updating its saved entry.