Rona Guard

Fills in logins from your Rona Guard vaults and saves new ones. Needs the Rona Guard app on this computer.

Rona Guard fills in logins from your Rona Guard vaults in Chrome and saves new ones. The extension connects Chrome with the Rona Guard app on your computer: the app holds the vault, finds the matching entries and releases values only when you fill in. The extension itself stores no passwords and no other vault data. Requirements • The Rona Guard app for macOS (macOS 13 or later) or Windows (10 and 11) on the same computer • In Rona Guard’s settings, allow browser extensions and switch on Chrome • Chrome 120 or later; the extension also works in Brave How it works • Pair once: the extension and Rona Guard show the same six-digit code. Only confirm in Rona Guard if both match. From then on, the extension reconnects by itself after every restart of Chrome and Rona Guard. • Rona Guard keeps running in the background, with an icon in the menu bar (macOS) or the notification area (Windows), and starts when you log in to your computer by default. If the app isn’t running, the extension starts it without a window. • If Rona Guard is locked, click “Unlock” in the extension and confirm with Touch ID or Windows Hello; Rona Guard’s window stays hidden. Without Touch ID or Windows Hello, you unlock Rona Guard with your master password as usual. • One click to fill in: click the Rona Guard symbol in the toolbar – or right in the sign-in field once you allow the extension access to websites – and choose the entry; the best match comes first. While Rona Guard is unlocked, no further confirmation is needed. If you want to confirm every fill, switch on “Confirm before every fill” in Rona Guard; Rona Guard then asks for Touch ID or Windows Hello each time. • One-time codes (TOTP) are filled in the same way, for example on the page after the password. • After you sign in, the extension offers to save new logins and changed passwords in Rona Guard – on any website, once you allow access to websites. You decide. • The extension window has three tabs. Vault: search all entries, filter them by vault, folder and type, and open an entry with its details. Generator: generate new passwords with the settings of your Rona Guard generator. Settings: the connection, lock or open Rona Guard, disconnect the pairing. • Rona Guard does the copying itself: with “Copy”, the app puts the username, password or one-time code on the clipboard and clears it after the time you set in Rona Guard. The extension never receives the value for this. Protection against the wrong site • Whether an entry matches the site is decided by Rona Guard in the app, based on the address Chrome reports – not by the page and not by the extension. • For sites that don’t match the entry, for unencrypted sites (http) and for forms from another website in a frame, Rona Guard always asks explicitly and names the website – even if you otherwise fill in with one click. • Values are filled in only on the page where you chose the entry. • Every fill is recorded in your vault’s protocol. If Rona Guard can’t write the event, it fills in nothing. What the extension sees and stores • It sees the address of the page where you fill in or save and the titles, usernames and websites of the entries it shows you, in the extension window also their type, folder and vault. It receives the username, password or one-time code of the chosen entry only when you fill in. • When you sign in to a website, it sees the username and password you enter there and passes them to Rona Guard. Rona Guard keeps them in memory for at most 10 minutes and only saves them once you confirm. • The extension stores no vault data: no passwords, usernames, titles or addresses. It keeps values in memory only until they are filled in or handed to Rona Guard, for at most 2 minutes. • All it keeps permanently is the identifier of the pairing and the pairing key it uses to reconnect to Rona Guard after a restart. The key opens nothing without the app; Rona Guard keeps its counterpart in the computer’s protected storage. The session stays in Chrome’s memory only. “Disconnect” in the extension deletes both; you can also remove the pairing in Rona Guard. • Everything stays on your computer: the extension talks only to the Rona Guard app, not to the internet. No analytics, no advertising, no code from the internet. Permissions • Native messaging: talk to the Rona Guard app on this computer and start it when needed • Active tab and scripting: fill in the current page when you click the Rona Guard symbol or use the keyboard shortcut • Storage: the identifier of the pairing and the pairing key • Optional, only if you allow it in the extension’s window: access to all websites, so that the Rona Guard symbol appears in sign-in fields and saving is offered after you sign in Honest limits Without the Rona Guard app on the same computer, the extension does nothing. It doesn’t fill in passkeys, cards or identities yet. Schweizerpunkt GmbH, Switzerland