CipherMoth

Fill logins from your self-hosted CipherMoth vault, only when you ask. No account, no tracking.

CipherMoth fills a saved login into the page you are on, only when you ask. It works with your own CipherMoth: your self-hosted CipherMoth server, or the CipherMoth desktop app on this computer. No CipherMoth account, no tracking, no analytics. HOW IT WORKS • Click the toolbar button or press Ctrl+Shift+L (⌘+Shift+L on a Mac), then pick a login. • Nothing shows up inside web pages, nothing is filled when a page loads, and the extension never asks to save logins. • Copy a username, password or live 2FA code with one click. Copied values are cleared from the clipboard after 30 seconds. HARD TO TRICK • Exact-origin matching: lookalike domains, other ports and http:// copies of an https:// site never match. Subdomain matching is off unless you turn it on. • Only the top frame is filled, and only fields a person can see and use. Hidden, transparent, covered or off-screen fields are skipped; sign-up and password-change forms are refused. • A login saved for another site asks before it fills. • The extension adds nothing to web pages, so pages cannot detect it, frame it or click-jack it. Other extensions and websites cannot message it. YOUR VAULT STAYS YOURS • Server mode: the extension talks only to the CipherMoth server address you enter, over HTTPS, and sends only the page's origin (scheme, host and port) to find matches, never the path, title or page contents. Unlock with your master password, or in the CipherMoth web app with a security key, passkey or Touch ID. • Desktop mode: the extension talks to the CipherMoth desktop app through your browser's native messaging, with no network at all. Pair each browser once by comparing a six-digit code; every message between the extension and the app is end-to-end encrypted. • The extension writes no passwords or vault contents to disk. REQUIREMENTS • Server mode: a CipherMoth server, version 3.6.0 or newer. • Desktop mode: the CipherMoth desktop app, version 3.9.0 or newer, and Chrome 133 or newer. CipherMoth is free and open source (MIT). Source code and releases: https://github.com/mr-grj/ciphermoth Guide: https://github.com/mr-grj/ciphermoth/blob/master/docs/EXTENSION.md