Ringer Vault

Fills passwords from your Ringer Vault, and offers to save the ones you type. Your vault is decrypted in memory only.

Ringer Vault fills and saves your passwords in Chrome, from a vault encrypted on your own devices. There is no account with us, no server of ours, no ads and no analytics. FILLS LOGINS WHERE THEY BELONG - Open Ringer Vault on a sign-in page and pick the login: it fills in one click. - Or click into the login field: your saved accounts for that site appear just above it, drawn so the page cannot read them. - A login is offered on its own site. Pages dressed up as a site in your vault, or as a well-known one, are flagged before anything is filled, as are pages that are not secure (http). SAVES AS YOU SIGN IN - When you sign in somewhere new, Ringer Vault offers to save the login. It stays quiet for logins it already has. - Changed a password? It offers to update the saved one once the sign-in works. - "Never for this site" stops the offer for a site. YOUR KEY, YOUR DRIVE - The vault is encrypted with AES-256-GCM, under a key made from your passphrase with Argon2id. It is decrypted in memory only, while unlocked, and locks itself after a few minutes away. - Sync goes through one encrypted file in a hidden folder of your own Google Drive, which only Ringer Vault can open. Google stores it but cannot read it, and it never passes through a server of ours. - Unlock with Touch ID or Windows Hello, or a PIN, after the first unlock with your passphrase. - Bring your passwords in from Chrome or another password manager (CSV), or from a Ringer Vault backup. WORKS WITH THE ANDROID APP The Ringer Vault app for Android fills the same vault in apps and in Chrome on your phone. HONEST ABOUT ITSELF Ringer Vault has not been independently audited. Its security code is published for review at github.com/ringervault/security. The extension talks only to Google (sign-in and your Drive file), and, if you turn on "Check how new a site is", to the public registry for a site's ending.