RonaGuard

RonaGuard fills in logins from your RonaGuard vaults in Chrome and saves new ones. The extension connects Chrome with the RonaGuard app on your computer: the app holds the vault, finds the matching entries and releases values only after you confirm. The extension itself stores no passwords. Requirements • The RonaGuard app for macOS (macOS 13 or later) or Windows (10 and 11) on the same computer • In RonaGuard’s settings, allow browser extensions and switch on Chrome • Chrome 120 or later; the extension also works in Brave How it works • Connect once: the extension and RonaGuard show the same six-digit code. Only confirm in RonaGuard if both match. • After each restart of Chrome or RonaGuard, you confirm the connection once in RonaGuard. • Filling in: click the RonaGuard symbol in the toolbar, choose the entry and confirm with Touch ID or Windows Hello. Without them – or if you set it up that way in RonaGuard – one click is enough while RonaGuard is unlocked. • One-time codes (TOTP) are filled in the same way, for example on the page after the password. • After you sign in, the extension offers to save new logins and changed passwords in RonaGuard – on any website, once you allow access to websites. You decide. • Generate new passwords right in the extension, with the settings of your RonaGuard generator. Protection against the wrong site • Whether an entry matches the site is decided by RonaGuard in the app, based on the address Chrome reports – not by the page and not by the extension. • For sites that don’t match the entry, for unencrypted sites (http) and for forms from another website, RonaGuard asks explicitly and names the website. • Values are filled in only on the page you confirmed. • Every fill is recorded in your vault’s protocol. If RonaGuard can’t write the event, it fills in nothing. What the extension sees and stores • It sees the address of the page where you fill in or save, the titles and usernames of matching entries and – only after you confirm – the username, password or one-time code of the chosen entry. • When you sign in to a website, it sees the username and password you enter there and passes them to RonaGuard. RonaGuard keeps them in memory for at most 10 minutes and only saves them once you confirm. • The extension stores none of this. It keeps values in memory only until they are filled in or handed to RonaGuard, for at most 2 minutes. It only remembers an identifier of the RonaGuard app it is connected to, and keeps the connection for the current Chrome session in memory. • Everything stays on your computer: the extension talks only to the RonaGuard app, not to the internet. No analytics, no advertising, no code from the internet. Permissions • Native messaging: talk to the RonaGuard app on this computer • Active tab and scripting: fill in the current page when you click the RonaGuard symbol or use the keyboard shortcut • Storage: the identifier of the connection • Optional, only if you allow it in the extension’s window: access to all websites, so that the RonaGuard symbol appears in sign-in fields and saving is offered after you sign in Honest limits Without the RonaGuard app on the same computer, the extension does nothing. It doesn’t fill in passkeys, cards or identities yet. Schweizerpunkt GmbH, Switzerland