Paneward — Browser Privacy Lock

Cover open Chrome web pages with a password or PIN. Auto-lock when idle or on startup.

Paneward covers your open web pages with an opaque privacy curtain when you step away, and removes it when you unlock with your password or PIN. Paneward is designed to prevent casual access to your normal web browsing session when you step away. It is not a replacement for your operating system's user account or screen lock. HOW IT WORKS • Lock now — one click on the toolbar icon covers every normal web page. • Keyboard shortcut — Ctrl+Shift+L (Command+Shift+L on Mac) locks at once; press it again to open the unlock window. Change it, or make it work even when Chrome is in the background (Global), in chrome://extensions/shortcuts. • Auto-lock — after 1, 2, 5, 10, 15, 30 or 60 minutes without keyboard or mouse input (default 5 minutes), or off. • Lock when your computer locks — when your operating system reports a locked screen to Chrome (where supported). • Lock on browser start — restored tabs open behind the curtain until you unlock (on by default). • Remote Lock (optional) — pair your phone and lock this browser from it. Optional phone unlock (off by default; turning it on needs your PIN), signed on the phone with a key the relay never sees. YOUR PAGES STAY INTACT The curtain sits on top of the page. Tabs are not closed or reloaded, and unsaved forms and drafts stay exactly as they were. While locked, clicks and key presses do not reach the page. UNLOCK SAFELY Clicking Unlock opens a separate window that belongs to Paneward. You type your password or PIN there — never into a web page. You can also unlock from the toolbar popup. PASSWORD, PIN AND RECOVERY • Choose a password (8+ characters) or a PIN (4 or more digits). • Stored only as a salted PBKDF2-HMAC-SHA-256 hash (600,000 iterations) on your device. Never sent anywhere. • A one-time recovery key lets you set a new password if you forget it. It is shown once and replaced whenever you use it. • After 5 wrong attempts you wait 30 seconds, and longer after further wrong attempts (up to 15 minutes). Nothing is ever deleted and you are never locked out permanently. PRIVACY • No account, no analytics, no tracking, no ads. • Paneward does not read, collect or transmit page content, form data, keystrokes, URLs, titles or history. • Remote Lock is off by default. If you turn it on, the Paneward relay stores only random identifiers, hashes and your browser’s push address — never your password, tabs or browsing data. WHY IT ASKS FOR ACCESS TO ALL WEBSITES Chrome shows “Read and change all your data on all websites” because Paneward needs to place its curtain on the pages you have open. The curtain script only draws the curtain and blocks input while locked. WHAT IT CANNOT DO (PLEASE READ) • Chrome does not let extensions cover its own pages: Settings, History, Downloads, Extensions, the New Tab page, the Chrome Web Store and other extensions' pages. The popup tells you when the current page can't be covered. • Anyone who can use your computer can disable or remove extensions at chrome://extensions. Use your computer's screen lock for device security. • Tab titles, site icons and the address bar remain visible. • Each Chrome profile has its own Paneward password. Incognito is covered only if you allow Paneward in Incognito. Support: https://paneward.bhavik.id/support/ Privacy policy: https://paneward.bhavik.id/privacy/ Developed by bhavik.id