Stash

Fills and saves logins from your end-to-end encrypted Stash vault.

Stash for Chrome fills and saves website logins from your Stash vault. Stash is an offline-first password and secrets vault for Android and iOS, built for developers: logins, API keys, env files, SSH keys, database URLs and 2FA codes. The extension joins Stash sync, so the logins you keep on your phone are ready in Chrome, and logins you save in Chrome reach your phone. HOW IT WORKS • Turn on sync in the Stash app on your phone first • Sign in to the same Google account in the extension • Unlock with your Stash passphrase • Open the popup on a login page and click a login to fill it FILL LOGINS The popup lists the logins that match the site you're on. Stash fills only when you click one, never on its own. SAVE NEW LOGINS When you sign in somewhere new, the popup offers to save the login to your vault. It syncs to your phones on the next sync. END-TO-END ENCRYPTED • Your vault is encrypted on your device before it leaves, so Google only ever stores ciphertext • Sync uses a hidden app folder in your own Google Drive. Stash can't see your other Drive files • Your passphrase is never stored. The key that opens your vault stays in memory and is gone when the browser closes • Auto-locks after 15 minutes • AES-256-GCM, with a key protected by your passphrase through Argon2id NO STASH ACCOUNT, NO STASH SERVER There is no Stash account to create and no Stash server. Your data goes only between your browser and your own Google Drive. No analytics, no ads and no tracking. PERMISSIONS • Read page content on all sites: to notice when you submit a login form, so Stash can offer to save it. It never draws on the page and keeps nothing • Identity: to sign in to Google Drive for sync • Storage: to cache your encrypted vault • Alarms: for auto-lock and the sync timer • Active tab and scripting: to fill the login you clicked into the current tab Requires the Stash app on Android or iOS with sync turned on.