The Viremail browser extensionNew

The Viremail Vault extension fills the logins and two-step sign-in codes in your Vault on the websites you use. It's in beta: it works in Chrome, Edge and Brave, and a Firefox version is being tested.

Install it

It isn't in the browser stores yet. Until it is, you can load the beta yourself:

1. Get the extension folder from us (ask through Contact us), and unzip it.
2. In Chrome, Edge or Brave, open the extensions page (chrome://extensions, edge://extensions or brave://extensions) and turn on Developer mode.
3. Choose Load unpacked and pick the chromium folder.
4. Pin Viremail Vault to your toolbar, so it's one click away.

When it's in the Chrome Web Store, Firefox Add-ons and Edge Add-ons, you'll install it from there and it will update itself.

Pair it with your Vault

1. Click Viremail Vault in your toolbar and choose Pair with Viremail. A Viremail tab opens.
2. Sign in if you need to, and unlock your Vault there.
3. Click Viremail Vault in your toolbar again. It shows a 6-digit code. Type that code on the Viremail page and choose Pair.

Only type a code that the extension in this browser shows you. Three wrong codes stop the pairing. We email you each time a browser is paired.

Unlock it

The extension never asks for your password. When it's locked, click Unlock with Viremail in it. A Viremail tab opens; if your Vault is unlocked there, choose Unlock the extension. That one click sends the extension your Vault's key, locked so only the extension you paired can open it.

It locks again after the auto-lock time in Vault settings, when you choose Lock, and when you close the browser.

Fill a login

• Open the sign-in page, click Viremail Vault, and choose Fill next to the login. Under For this site you only see logins saved for this website.
• To copy instead, choose User, Password or Code. Copied passwords and codes are cleared after the time in Vault settings. The extension can't tell whether you copied something else in the meantime, so it clears whatever is on the clipboard then.
• Search finds anything in your Vault to copy. It only fills the logins saved for the site you're on.

Suggest on every site

Turn on Suggest on every site in the extension to get a small Vault icon in sign-in fields. Your browser asks you to allow the extension to read the websites you visit, which is what showing the icon needs. Click the icon and pick a login to fill it. Turn it off to take the icon and the permission away again. Nothing from the pages you visit is ever sent anywhere.

Which websites a login fills on

Each website saved in a login has a setting, under Websites when you edit it:

• This site (the usual one): the same address, with or without www.
• Whole domain: any address of that website, like mail.example.co.uk for example.co.uk. Shared addresses like github.io are handled properly, so one person's page never gets another's login.
• This exact address: only that address and the pages under it.
• Never fill.

In the Vault, search for an address, like example.com, to see which logins fill there.

Save a login, add a sign-in code

• After you sign in somewhere, the extension's button shows a 1. Open it to save the login, or to update a changed password. It forgets what you typed after 2 minutes if you don't.
• When a page shows a setup link for a sign-in code, or you choose Scan this page for a 2FA QR code, the extension offers to add the code. The scan is a picture of the visible page, read in your browser and thrown away.
• Your Viremail sign-in code can't go in the Vault, from here or anywhere.

Built to be careful

• Look-alike addresses never fill. If a page's address is close to one in your Vault (paypa1.com for paypal.com, or letters from another alphabet), you get a warning, and nothing is filled.
• Pages without https, and addresses with unusual characters, ask first.
• Nothing fills by itself. Only after your click, never while a page is still loading, never into fields that are hidden, see-through, covered or off screen, and never into a frame from another website.
• Its own key. The extension talks to Viremail with its own key, which can only read your encrypted Vault and save changes, never your mail or anything else. Saving still needs your unlocked Vault.

Unpair a browser

In the extension, choose Unpair this browser. Or open Vault settings and choose Revoke next to it under Paired browsers: the extension stops working at once, even if you no longer have that computer.

See the Privacy policy for exactly what the extension can see and what it keeps.