Password Age Reminder on Login Pages

WHAT IT DOES This script detects login pages and displays a floating reminder panel showing the age of your password for that domain. You set the date when you last changed your password, and the script calculates how many days have passed. A color-coded status system makes it easy to see your password's health at a glance: green (365 days). Each status includes a recommendation—from "Your password is recent" to "Please update immediately." The panel also includes a notes field where you can record password change history, security questions, or other account-related information. All data is stored locally in your browser and never transmitted anywhere. WHERE IT RUNS Works on any login page—email services, social media, banking portals, work accounts, or any site with a password field. The script detects login pages by scanning for password input fields, login forms with authentication-related text, and common login keywords (login, sign in, password, username, forgot password). When a login page is detected, the panel appears automatically. HOW TO USE The panel appears when you visit a login page. If you haven't set a password date for this domain, the panel shows "No password age record found." Click the date picker to select the date you last changed your password, then click "Set Date" to save it. The panel will calculate the age and show the color-coded status with a recommendation. The notes field automatically saves as you type—use it to store security questions, password change history, or account notes. The "Clear Record" button removes all data for this domain. Toggle notifications on/off in the settings section—when enabled, you'll receive a browser notification if your password is over 180 days old when you visit the login page. TECHNICAL MECHANISM: LOGIN PAGE DETECTION WITH DOMAIN-KEYED PASSWORD RECORDS The script detects login pages using a three-pass heuristic. First, it queries the DOM for input[type="password"] elements—the presence of any password field is a strong indicator of a login page. Second, it examines all form elements, checking if their text content contains login-related keywords (login, sign in, password, username) and if they contain at least one text/email/password input. Third, it scans the entire page text content for login keywords, counting matches—if three or more keywords are found, the page is treated as a login page. Once a login page is detected, the script retrieves the password record for the current domain from GM_setValue. Each record stores the lastChange date (ISO string), updatedAt timestamp, and optional notes. The password age is calculated by comparing the lastChange date with the current date. Age status thresholds are: Good (365 days). Each status includes a color and recommendation message. The notes field uses an auto-save mechanism with an 800ms debounce to reduce writes. Notifications use GM_notification and are triggered when the password age exceeds 180 days. All data is stored locally and never transmitted—the script never reads or writes password input values, only stores date metadata. THE PANEL The password age reminder appears in a draggable, resizable panel that remembers its position per site. The panel shows the domain name, password age in days, last change date, and a color-coded status badge with recommendation. Below the status, a date picker allows you to set or update the password change date. The notes field provides a secure place to store additional account information. Drag by the header to reposition, collapse to a compact icon with a click, and resize using the bottom-right corner. The panel snaps to screen edges for tidy placement and closes with the Escape key. All settings—notification preference and panel position—persist per website using GM_setValue, so your view returns exactly as you left it. PLEASE NOTE This script requires the free BotGentz extension to run. The script detects login pages by scanning for password fields and authentication text—it never reads, captures, or transmits password values. All date and note data is stored locally in your browser via GM_setValue and never transmitted. The password age reminders are recommendations based on general security best practices—actual password rotation policies may vary by organization or service. The notes field is not encrypted; use it for non-sensitive information only. Notifications require the GM_notification grant and will only appear when the panel is closed or the page is in the background. The script only activates on pages detected as login pages; on other pages, the panel remains hidden.