ClawVault — Autofill

ClawVault Autofill fills your saved logins on any site — and it's zero-knowledge, so your passwords stay yours. WHY IT'S DIFFERENT Most password managers ask you to trust that they won't look at your secrets. ClawVault is built so it CAN'T. Your vault is encrypted and decrypted only on your own device, with a key derived from your master password. ClawVault's servers store nothing but opaque encrypted blobs — there is no server-side "reveal" endpoint, and no one at ClawVault can read your passwords. By design, not by promise. HOW IT WORKS • Sign in to ClawVault. The extension downloads your ENCRYPTED vault. • Enter your master password once. Your browser derives the key (Argon2id) and unlocks your vault entirely on-device. The key lives only in memory. • On any login page, open the popup, pick the matching login, and click Fill. The decrypted password goes straight into the page — never back to any server. ZERO-KNOWLEDGE, ENFORCED • The server is blind: it holds only sealed blobs and your encrypted key bundle. • Your decryption key lives only in RAM and is wiped when you lock or close the browser. It is never written to disk. • Your master password is read once at unlock, then discarded. It never leaves your device and is never transmitted. • Idle lock: after a period of inactivity the key is dropped and you re-unlock. BIOMETRIC QUICK-UNLOCK (OPTIONAL) Enable Touch ID, Windows Hello, or a device PIN (via WebAuthn) to re-unlock without retyping your master password. It's off by default, requires a master-password unlock to set up, and your master password always remains the fallback. The stored material is useless without a live, on-device authenticator assertion. CROSS-BROWSER & CROSS-DEVICE One vault, byte-compatible across Chrome, Edge, Brave, Arc, Firefox, and the ClawVault web and mobile apps. An item sealed on any device opens on every other. PERMISSIONS ClawVault asks only for what autofill needs: storage (for encrypted key material), activeTab/scripting (to fill the page you choose), alarms (idle lock), and host access (so it can fill logins on the sites you use and sync with ClawVault). It does not read or transmit page contents to us, and it does not sell or share your data. Privacy policy: https://go-claw.com/extension/privacy