Universal Bulk Password Age Checker Across Login Pages

WHAT IT DOES

Universal Bulk Password Age Checker Across Login Pages solves a common security awareness challenge: knowing when your passwords were last changed is critical for maintaining good security hygiene, but most sites don't display this information prominently. This tool reads your current login page, detects any password input fields, and checks the age or last-change date of the password if the site provides this information through password policy metadata, security headers, data attributes, or embedded scripts. It displays a summary of detected password fields with status indicators: green for valid (within threshold), red for expired (exceeds threshold), and gray for unknown (no age data available). You can configure the expiration threshold (default 90 days) and export a report of all checked password ages. The tool provides a preview of detected password fields and their statuses before any data is processed.

WHERE IT RUNS

This extension panel runs directly inside your browser as an overlay on any login page. It works on any site with a password input field, including corporate SSO portals, email services, social media platforms, and custom applications. The tool detects password fields from the page's DOM and extracts age information from available metadata sources. It requires no additional permissions beyond the BotGentz extension and does not access or store password values.

HOW TO USE

After installing the BotGentz extension and activating Universal Bulk Password Age Checker Across Login Pages, navigate to any login page. Click the extension icon in your browser toolbar to open the panel. The tool automatically detects password input fields on the page. Configure the expiration threshold (in days) — passwords older than this value will be marked as expired. Click "Scan Password Fields" to check the age of each detected password. The tool attempts to estimate password age from data attributes, meta tags, security headers, script data, or form policies. Results are displayed in a scrollable report with status indicators showing which passwords are valid, expired, or unknown. Click "Export Report" to copy a detailed report of all checked passwords to your clipboard, including field labels, status, age in days, and data source.

TECHNICAL OPERATION — Metadata-Based Password Age Detection

This tool operates through metadata extraction rather than password value access. It first scans the page for password input fields using selectors like `input[type="password"]` and `input[type="text"][autocomplete*="password"]`. For each password field, the tool attempts to estimate age from multiple metadata sources: `data-password-last-change` or `data-password-age` attributes on the input element or its parent form; `meta[name="password-last-change"]` tags; `script[data-password-data]` containing JSON with a `passwordAge` field; form `data-password-policy` attributes containing structured policy data; and server-sent security headers that may include password rotation information. The estimated age is compared against the user-configured threshold (default 90 days) to determine if the password is expired. Statuses are color-coded: green for valid (age ≤ threshold), red for expired (age > threshold), and gray for unknown (no age data). The tool does not read, store, or transmit password values — it only checks metadata and does not interact with the password input's value property.

THE PANEL

The extension panel is fully draggable and remembers its position per site session. It snaps to the nearest edge of the browser viewport when dragged within 50 pixels of any side. You can collapse the panel to a compact title bar using the minimize button, preserving your selection state. The panel resizes vertically by dragging the bottom edge. Press the Escape key to close the panel instantly. The results update in real-time after each scan.

PLEASE NOTE

This tool requires the free BotGentz extension to function. The script does not read, store, or log any password values — it only checks password age metadata that the site makes available. Not all websites provide password age information; in these cases, the status will show as "unknown." The tool is a security awareness aid and does not perform actual password strength testing or authentication. The expiration threshold is user-configurable and defaults to 90 days, following common security recommendations. Sites may update their DOM structure or metadata formats over time, which could affect age detection; we monitor and release compatibility updates as needed.