Skip to content
VaultTerm
Browser extension

Your vault where you work.

Autofill logins and capture new credentials in Chrome and Firefox. The extension holds an encrypted copy of your vault on the device, so a fill is a local decrypt that works instantly and offline — sealed under a key your organization can withdraw, with every reveal still recorded.

the problem

A vault you have to leave your browser to use is a vault you stop using. But a local copy your organization can neither withdraw nor audit turns the browser into the soft underbelly.

What it does

Match and autofill
The extension recognises the site you're on and fills the right login, with per-domain rules so it fills only where it should.
Capture on submit
New logins are offered for capture as you create them, so the vault stays current without a separate save step.
A copy that stays accountable
The device copy is sealed under a key the server issues — bound to you, this device and your organization, time-limited and revocable. Fills from it are journalled and handed to the audit trail on the next sync.
Built-in authenticator
Store TOTP seeds and read codes right in the popup — your second factor lives with the login it protects.
vaultterm.io/extension
Browser extension in VaultTerm
  • On-site match detection and autofill
  • Capture new logins on submit
  • Local biometric unlock
  • In-popup TOTP authenticator

how we back it up

No hand-waving on security

The device copy is sealed under a server-issued key that can be withdrawn — by you, by an admin, or by a policy that turns offline copies off entirely.
Refresh tokens are single-use with server-side reuse detection, so a replayed token is caught rather than honoured.
Builds for Chrome, Edge, Firefox and Safari — not yet published to the stores.

faq --list

Browser extension — questions

Does the extension store my passwords locally?

Yes — deliberately, as an encrypted copy, which is what makes a fill instant and lets it work offline. The copy is sealed under a key the server issues and can revoke, every fill from it is written to the audit trail, and an organization can turn offline copies off entirely.

Which browsers are supported?

Chrome and Edge (Chromium), Firefox and Safari. The same vault and rules apply across them — though none of the store listings is live yet, so there is nothing to install today.

Can it handle my 2FA codes too?

Yes, there's a built-in TOTP authenticator, so your one-time codes sit alongside the login they belong to.