HedHog Vaults

HedHog password manager and autofill.

HedHog Vaults is the official HedHog extension for storing passwords and filling forms in the browser. It has no server of its own: you enter the address of YOUR HedHog, authorize access, and from then on the extension talks only to it. None of your data goes through us. WHAT IT DOES • Fills username and password on sites you already have in the vault, with one click. • Offers to save the credential you just typed, and to pick which vault it goes to. • Recognizes a password change and updates the existing item instead of creating a duplicate. • Generates a strong password on sign-up forms and fills the confirmation field too. • Fills the two-step verification code (TOTP) from the saved item. • Fills sign-up data — name, email, phone, address — from a profile kept in the vault. • Locks itself after inactivity, within the window your server defines. HOW YOUR PASSWORD IS PROTECTED Vault content is encrypted on your device, with AES-256-GCM, before it leaves. The server stores only the ciphertext: neither it nor we can read what is inside. The key that opens the vault is derived from your master password with Argon2id and never leaves your computer. When you authorize the extension, HedHog uses OAuth with PKCE — the extension never sees your account password. Your 2FA secret does not leave either: the six-digit code is computed inside the extension, and only the code reaches the page. PRIVACY No telemetry. No analytics. No trackers. No third parties. The only network connection the extension makes is to the HedHog server you configured. The extension does not ask for access to every site at install time: permission is requested on demand, when you connect to your server.