Accounts and the local vault
Contents
Password
The first Accounts opening shows Create your local vault: enter and confirm at least 8 characters. After locking, use Unlock your local vault.
This is the local ExtraExecutor password, not the Roblox password, and is not sent to Roblox. Account files use PBKDF2-HMAC-SHA256, AES-256-GCM, and Windows DPAPI. Forgotten-password recovery is not implemented.
Closing Account Manager locks the vault and cancels pending account tasks, timers, and recovery. Already running Roblox is not closed. Keep the manager open and unlocked for continuing automation.
Adding accounts
Manual Login
Accounts → Add Account → Manual Login opens the official Roblox page in a private window. Complete sign-in and leave the window open until Saved @username. The UI checks approximately every 2 seconds; Finish login is a manual alternative.
Saving requires a session and Roblox user ID/username verification. Opening the site or entering a password alone is insufficient. Re-adding the same user ID updates its session instead of duplicating it.
Cookie(s)
Enter one ROBLOSECURITY session per line, up to 100 per import and 100 total accounts. Import verifies sequentially. If an error interrupts import, earlier entries remain saved; retry only remaining entries. The field clears after submission.
Inherited User:Pass and Custom (URL + JS) menu entries are not fully ported and do not replace Manual Login.
Table and folders
Username is the verified Roblox name; Alias and Description are local notes. RAM cap is a saved limit; Script is the assigned file. No cap and None are not errors.
Interval shows the automation period or Script signals only; Off means disabled. Stay online is the duration before a pause; Until reconnect means no separate hold pause. Retry shows delay/attempt limit or Off. VIP / game shows Place ID, target type, and a short local invitation identifier, never the private code. Wide tables scroll horizontally; cell tooltips show full text.
Ctrl+click adds/removes selections. Right-clicking an unselected row selects it. Double-click opens its settings. Some actions require exactly one account.
New folder → Create creates a logical group. Folder filters; Move selected moves selected accounts; All accounts shows everything. Groups are not Windows cookie folders.
Copy settings: choose source, recipients/folder, review, confirm. Copies memory, script, recovery, startup/attach/submit, cache, automation, and allowed folders. Identity, process binding, and the account's own folder are not copied.
Action reference
Right-click → Session settings
Actions apply to selected accounts:
- Assign script: one file for the selection; clearing also disables automatic submission.
- Game / VIP: one Recovery target; clearing disables recovery/signals.
- Intervals & reconnect: signals, interval, hold duration, timeout. Initial values come from the first account; Save applies them to all listed recipients.
- Memory limit: group saved preset and next-launch application, without modifying a live process.
- Enable/Disable auto-attach, script after attach, crash reconnect, temp cache cleanup: explicit separate actions.
- Copy account settings: source/recipient review dialog.
- Launch & status: launch review and confirmation.
Script after attach requires a file for each account and enables auto-attach. Crash reconnect requires each target. Group changes validate before saving, avoiding misleading partial success when required assignments are missing.
Quick VIP assignment
Paste a full URL in VIP link above the table. Place ID is extracted from /games/...; short share URLs need a separate Place ID. The link is masked and cleared after saving.
Choose Selected accounts, Current folder, or All accounts. Save VIP displays the recipient count. It saves each Recovery target without enabling launch/recovery or changing script/memory/auto-attach. Existing retry settings remain; new targets default to 3 attempts and 10 seconds.
Configure opens settings for that scope. For all settings, configure one profile and use Copy settings, reviewing recipients.
| Action | Current behavior |
|---|
| Remove Account | Removes a local session after confirmation; does not delete the Roblox account or stop Player |
| Hide Usernames | Masks display names, without encrypting the screen or changing Roblox |
| Copy Username / UserId / Profile | Copies selected values, one per line |
| Sort Alphabetically | Switches alphabetical/saved display order |
| Set Alias / Set Description | Saves local notes |
| Groups → Move Account To | Selects a folder and moves accounts |
| Copy Group | Copies selected group names |
| View Fields | Local metadata; arbitrary editing of all original RAM fields is not ported |
| Dump Details | Verifies session, fetches public profile, saves JSON in AccountDumps, displays data/path |
| Get Authentication Ticket | Requests and copies a fresh ticket; exactly one account |
| Copy Security Token | Copies session directly from native code to Windows clipboard; exactly one account |
| Copy rbx-player Link | Fresh ticket and game URI; Place ID and optional Job ID in main form required |
| Copy App Link | App launch URI with fresh ticket, no Place ID needed |
| Quick Log In | Other-device code, device details, and separate Confirm login |
| Account Control | Account settings, not full original Nexus panel |
| Edit Theme | Shared appearance editor |
Token/ticket/link copying explicitly exports a secret to Windows clipboard. It is not displayed in the panel, logged, or included in profile backups. Other clipboard readers can access it. Exclude these values from bug reports.
Dump Details includes username, user ID, display name, check time, creation date, public description, and isBanned. It is not a full original dump with balance, email, or all internal data.
Quick Log In
- Select one account.
- Obtain a Roblox Quick Log In code on the other device.
- Enter its six letters/digits in ExtraExecutor → Quick Log In.
- Check code displays device/location if Roblox returns them.
- Confirm login sends final approval.
Opening the dialog does not authorize the device. Use another code clears checked details. Replace expired/used codes.
Account-authenticated Open Browser, URL+JS, password/email/PIN/friend/follow operations, server lists/history, and arbitrary old RAM settings are not implemented merely because buttons exist. See status. Main-form Join Server and SaveToAccount also route to profiles: use Recovery + Launch & status.