Tavi Vault

Tavi Vault brings your organization's vault into the browser. • Autofill saved logins on the sites they belong to • Save and update prompts when you sign in to a site • Shared passwords with their exact privileges (fill-only logins never reveal the secret) • Strong password and passphrase generator • Folders, favorites, and search across your vault Zero-knowledge by design: your master password never leaves your device. Items are encrypted and decrypted locally; the server only ever stores sealed blobs. The extension keeps its own session — signing out of the web app never signs the extension out. PERMISSIONS AND PRIVACY — PLEASE READ • Runs on every website. To find login forms, offer to fill your saved passwords and ask to save new ones, the extension runs on all http and https pages you open, including frames inside a page (many sign-in forms are embedded frames). Chrome shows this as "Read and change all your data on all websites". It is active from installation, even before you sign in, but it does nothing on a page until a login form is present. • Site matching happens only on your device. Which saved login belongs to which site is decided locally inside the extension. Your browsing history and page contents are never sent anywhere. • It talks to exactly one server: the Tavi Vault server you sign in to. There are no analytics, no tracking, no beacons and no third-party services of any kind. • What it reads from a page: the username and password fields of a login form you submit, only to offer "Save to Tavi Vault?". Nothing is saved unless you accept, and you can tell it never to ask again for a site. • What it stores on your device: your extension session token, your settings, the list of sites you told it never to ask about, and an encrypted copy of your vault items. Your master password and unlocked keys are held in memory only and are wiped on lock, sign-out or browser exit. Requires a Tavi Vault account (vault.taviportal.com or your organization's data center).