NUP — Identity Generator

NUP is a browser extension for Chromium-based browsers (Chrome, Edge, Brave, and similar) that generates a complete fake identity in one click. It produces a random full name, a unique username, a strong password, and a real temporary email address — everything you need to sign up for a website without using your actual personal details.

---

Table of Contents

• What It Does
• How It Works
• Features
• Project Structure
• Installation
• How to Use
• Technical Notes
• Permissions Explained
• Limitations and Privacy Notes

---

What It Does

When you open the extension popup, NUP automatically creates a full identity for you:

• A randomly selected first and last name
• A 15-character alphanumeric username derived from that name
• A 16-character password containing uppercase letters, lowercase letters, numbers, and special characters
• A live temporary email address from the Mail.tm service, with a built-in inbox that checks for new messages every 5 seconds

This is useful when you need to register for a service without revealing your real email address or credentials, or when testing sign-up flows during development.

---

How It Works

Identity Generation

On startup, NUP checks its local browser storage for a previously generated identity. If one exists, it restores it. If not, it generates a new one automatically.

• Name: Randomly picked from a built-in list of first names (male, female, or gender-neutral depending on your selection) and last names. The gender filter only affects the first name.
• Username: Built by combining the first name and the initial of the last name, padded to exactly 15 characters with random alphanumeric characters, and ending with a 4-character hex timestamp to ensure uniqueness.
• Password: 16 characters long, guaranteed to include at least 2 lowercase letters, 2 uppercase letters, 2 digits, and 2 special characters. The characters are then shuffled using a cryptographically secure random algorithm (crypto.getRandomValues), so the result is not predictable.

Each field can also be regenerated individually without affecting the others, except that regenerating the name also regenerates the username (since the username is derived from the name).

A visual password strength indicator rates the password from Weak to Strong based on its length, use of mixed case, digits, and special characters.

Temporary Email

NUP connects to the Mail.tm public API to create a disposable email address automatically when the popup opens. The process is:

1. The extension fetches the list of available email domains from Mail.tm.
2. It generates a random 10-character local address (the part before the @ symbol).
3. It registers a new account on Mail.tm with a randomly generated password.
4. It obtains a JWT token (a secure login credential used to access the inbox) by authenticating with that account.
5. The inbox is polled every 5 seconds and any new messages appear in the popup.

The email session (address, internal password, and token) is saved in local browser storage so that if you close and reopen the popup, the same inbox is restored without creating a new address — as long as the token is still valid.

Clicking the regenerate button on the email field discards the current inbox and creates a fresh one.

Reading Messages

Clicking a message in the inbox opens a detail view that shows the sender, subject, and full message body. If the email contains an HTML body, it is rendered in a sandboxed iframe (meaning scripts inside the email cannot interact with the extension). Plain-text emails are displayed as-is.

NUP also automatically scans the message for:

• Verification codes: Any sequence of 4 to 8 consecutive digits is highlighted with a one-click copy button.
• Verification links: URLs containing keywords such as "verify", "confirm", or "activate" are surfaced as a clearly labelled button that opens the link in a new browser tab.

---

Features

• One-click generation of a full name, username, and password
• Gender filter for the name (Any, Male, Female)
• Individual regeneration of any single field
• Password strength meter with four levels: Weak, Fair, Good, Strong
• Copy individual fields to the clipboard with a single click
• Copy all three fields (name, username, password) as formatted text with one button
• Automatic temporary email creation via Mail.tm
• Live inbox with polling every 5 seconds
• Automatic detection and highlighting of verification codes and links in received emails
• Full HTML email rendering in a sandboxed iframe
• Session persistence: the last generated identity and email session are remembered between popup openings
• Clean, animated interface with entrance animations, ripple effects, and copy feedback

---

Project Structure

NUP/
├── manifest.json   # Extension configuration (name, version, permissions)
├── popup.html      # The popup UI layout and structure
├── popup.js        # All application logic (generation, email, inbox, UI)
├── popup.css       # All visual styles and animations
└── logo.png        # Extension icon

The extension is self-contained. There is no build step, no bundler, and no external JavaScript libraries. Everything runs directly in the browser.

---

Installation

Because NUP is a local extension (not published to the Chrome Web Store), you install it in developer mode.

Steps for Chrome (and most Chromium-based browsers):

1. Download or clone this repository so the files are in a folder on your computer.
2. Open your browser and navigate to chrome://extensions.
3. Enable Developer mode using the toggle in the top-right corner of the page.
4. Click Load unpacked.
5. Select the folder containing the extension files (the folder with manifest.json in it).
6. The NUP extension will appear in your extensions list. Pin it to the toolbar for easy access.

No internet connection is required to generate names, usernames, and passwords. An internet connection is required for the temporary email feature.

---

How to Use

1. Click the NUP icon in your browser toolbar to open the popup.
2. An identity (name, username, password) and a temporary email address are generated automatically.
3. Use the gender dropdown to filter the name to male, female, or gender-neutral names before generating.
4. Click Generate Identity to produce a completely new set of credentials.
5. Use the small regenerate button next to each field to replace only that field.
6. Click the copy icon next to any field to copy it to your clipboard.
7. Click Copy All to Clipboard to copy the name, username, and password together as formatted text.
8. The temporary email address appears in the lower section. Once the inbox is live, any incoming messages will appear within 5 seconds.
9. Click a message to open it and read the full content. If a verification code or link is found, it will be highlighted at the top of the message for quick access.
10. Click the regenerate button next to the email address to create a new disposable inbox (the old inbox and its messages will be discarded).

---

Technical Notes

• Password generation uses crypto.getRandomValues, which is the browser's built-in cryptographically secure random number generator. This is more secure than using Math.random().
• Username uniqueness is reinforced by appending a 4-character suffix derived from the lower 16 bits of the current timestamp. This means two usernames generated within the same millisecond range could theoretically match, but in normal use this will not happen.
• Email HTML rendering uses a sandboxed <iframe> with only allow-same-origin permitted. This prevents any JavaScript in the received email from executing, which protects against malicious email content.
• Session storage uses the Chrome Extension storage.local API. Data is stored locally on your device and is not sent anywhere by the extension itself.
• The extension targets Manifest Version 3, the current standard for Chrome extensions.

---

Permissions Explained

The extension requests the following permissions:

Permission	Why it is needed
storage	To save and restore the last generated identity and email session between popup openings
clipboardWrite	To copy generated credentials and verification codes to the clipboard
tabs	To open verification links from emails in a new browser tab
https://api.mail.tm/*	To communicate with the Mail.tm API for creating inboxes and fetching messages

---

Limitations and Privacy Notes

• Temporary email addresses expire. Mail.tm inboxes are temporary by design. If the token saved in storage expires or the account is deleted by Mail.tm, the extension will automatically create a new inbox on the next popup open.
• Generated identities are not real. The names, usernames, and passwords are randomly constructed. They are not connected to any real person.
• No data is collected by this extension. All generation happens locally. The only external communication is with the Mail.tm API, which is necessary for the temporary email feature.
• Mail.tm is a third-party service. NUP relies on the public Mail.tm API. If that service is unavailable or changes its API, the temporary email feature will not work. The identity generation features (name, username, password) will continue to work without any internet connection.
• Do not use generated identities for illegal or harmful purposes. This tool is intended for privacy protection and development testing only.