Generate a unique, secure password for every web site from one master password.
No password is ever stored within the extension, or anywhere else for that matter! They are generated on demand using a cryptographic hash function. The inputs are your master password and the site URL. This means you get the same unique password for each site on demand, but it cannot be used to discover your master password.