Session Transfer

Securely move an authenticated browser session between Chrome profiles or devices. AES-256-GCM encrypted, fully local, no server.

Session Transfer moves an authenticated website session from one Chrome browser, profile, or computer to another in a couple of clicks — no re-login, no MFA loop. HOW IT WORKS 1. On the source browser, open the site, click the extension and press "Transfer Session". 2. The extension captures cookies (including HttpOnly), localStorage, sessionStorage, IndexedDB and Cache Storage, then encrypts everything with AES-256-GCM using a one-time transfer code. 3. On the destination browser, press "Receive Session", load the encrypted package and enter the code. State is restored, the page reloads, and a verification report confirms the result. SECURITY & PRIVACY BY DESIGN • 100% local — no servers, no accounts, no analytics, no tracking. • AES-256-GCM with an ephemeral key derived via PBKDF2-SHA256 (210,000 iterations). • One-time codes; packages expire after 5 minutes. • Strict origin isolation — a package can only ever be restored into its own website origin. • Existing destination sessions are never silently overwritten: choose Replace, Merge or Cancel, with an optional encrypted, auto-expiring backup. • Honest about limits: WebAuthn/passkeys, hardware credentials and TLS-bound state cannot be transferred by any extension, and we say so in-product instead of faking success. IDEAL FOR • Developers moving authenticated sessions between dev/staging/prod profiles. • Switching computers or browsers without logging in again. • QA teams reproducing authenticated states quickly.