VeruVault

VeruVault fills your saved logins into sign-in forms, without the password manager ever handing your vault to the browser. Everything is decrypted inside the extension. VeruSuite stores ciphertext and holds no key, so nobody at VeruSuite can read your passwords, and neither can anyone who obtains a copy of the database. HOW IT WORKS Open VeruVault in a tab and sign in to VeruSuite, then unlock the extension with your vault secret. That secret is separate from your VeruSuite password and is never sent anywhere. A small mark appears inside credential fields, showing how many saved logins match the page. Click it to choose one. WHAT IT WILL NOT DO It never fills without a click. Silent autofill is how a hidden form on an unrelated page harvests a credential, and checking the origin does not fix that, because the origin is genuinely correct. It refuses to fill a credential saved for an https:// address into a plain http:// page. Anything typed there travels in the clear. It holds no vault contents in the page. The content script running alongside a site is given one credential at the moment you ask for it, and never a list of what is in your vault. FEATURES Fill logins and one-time passwords on sign-in forms Offers to save a new login, or update one after a password change Generates strong passwords, on your device Handles multi-step and 2FA sign-in flows Locks automatically after a period of inactivity Available in English, Arabic and Lithuanian REQUIREMENTS A VeruSuite account with VeruVault. The extension is a client for a vault you already have; it does not store credentials of its own.