Skip to main content
Version: Next

Browser Extension Setup

The SyVault browser extension is the primary way most users interact with SyVault day-to-day. It detects login forms, autofills credentials, saves new logins, and generates strong passwords -- all without leaving the current page.

Installation​

BrowserStoreNotes
ChromeChrome Web StoreAlso works on Chromium-based browsers
FirefoxFirefox Add-onsSupports Firefox 115+
SafariBundled with macOS/iOS appEnable via Safari > Settings > Extensions
EdgeEdge Add-onsAlso available via Chrome Web Store
BraveChrome Web StoreInstall directly from CWS

After installing, pin the extension to your browser toolbar for quick access:

  • Chrome/Brave/Edge: Click the puzzle piece icon in the toolbar, find SyVault, click the pin icon.
  • Firefox: Right-click the SyVault icon in the extensions menu and choose "Pin to Toolbar."
  • Safari: The extension icon appears automatically in the toolbar once enabled.

Signing In​

Click the SyVault icon in the toolbar. Enter your email and master password. If you have 2FA enabled, you will be prompted for your TOTP code or security key. The extension caches your session for a configurable duration (default: 15 minutes of inactivity).

How Autofill Works​

SyVault uses a Manifest V3 (MV3) architecture on Chromium browsers and the equivalent WebExtensions API on Firefox.

  1. Content Script Detection -- When a page loads, a lightweight content script scans the DOM for <input> elements with types password, email, text, and username. It identifies login forms, registration forms, and credit card forms using heuristics (field names, labels, autocomplete attributes, form structure).

  2. Matching -- The content script sends the page's origin URL to the extension's service worker, which searches your encrypted vault index for matching records. Matching uses the URL's hostname and applies rules for subdomain handling and equivalent domains (e.g., google.com matches accounts.google.com).

  3. Popup Overlay -- If matches are found, the extension places a small SyVault icon inside the detected input field. Clicking it opens an inline dropdown listing matching credentials. Select one to autofill both the username and password fields.

  4. Decryption -- The record is decrypted in the extension's memory using your Vault Key and the record's DEK. Plaintext exists only in memory and is never written to disk or extension storage.

Keyboard Shortcut

Press Ctrl+Shift+L (Windows/Linux) or Cmd+Shift+L (macOS) to open the SyVault autofill popup on the current page. You can customize this shortcut in your browser's extension keyboard shortcuts settings.

Saving New Credentials​

When SyVault detects a form submission with a new or updated credential:

  1. A notification bar appears at the top of the page asking if you want to Save or Update the credential.
  2. Click Save to open a quick-save dialog where you can edit the name, choose a vault, and add notes.
  3. The credential is encrypted locally and synced.

Password Generator​

Click the SyVault icon and choose Generate Password to create a strong password without leaving the page. Options include:

  • Random: Configurable length (8-128 characters), with toggles for uppercase, lowercase, digits, and symbols.
  • Passphrase: 3-10 random words with configurable separator and optional capitalization.

The generated password can be copied to clipboard or autofilled directly into the current form field.

Security Notes​

  • The extension never injects scripts into banking or sensitive pages unless you explicitly trigger autofill.
  • All cryptographic operations use the browser's native SubtleCrypto API.
  • The extension requests only the minimum permissions required: activeTab, storage, alarms, and host permissions for form detection.
  • Session data is stored in encrypted memory. Locking the extension (click icon > Lock) clears all plaintext material immediately.