Share Credentials

Click a login field and pick the credential; the 2FA code follows. Fills, copies and saves passwords for Share Credentials teams.

Share Credentials is a secure password manager for agencies and teams who share credentials with clients and colleagues. This extension brings your team's vault to the site you are signing in to. Features: - Click into a login field and the credentials saved for that site appear under it; one click fills the username and password, and the two-factor code follows when the site asks for it - Sign up somewhere new, or sign in with a login the vault does not have, and the extension offers to save it, filed under the project your Chrome profile belongs to - The popup opens already filtered to the website in your current tab - Narrow further by project, and the project you pick is remembered for that Chrome profile - One-click fill for username and password, without going through the clipboard - Two-factor codes shown next to the login they belong to, and filled into the code boxes with one click - Add a two-factor code by pasting its setup link or the picture of its QR code - Save a new login straight from the form you just filled in - Copy buttons for the times you would rather paste it yourself - Team and project-based organisation, with the same access rules as the web app - Every reveal, copy and fill recorded in the audit trail How it works: 1. Click the Share Credentials icon in your browser and sign in with your Share Credentials account 2. On any sign-in page, click into the username or password field: the logins saved for that site are listed right there 3. Click one and both fields are filled; when the site asks for the two-factor code, click the code field and the code is one click away 4. The popup does the same from the toolbar, already narrowed to the site you are on, with Copy buttons for the times you would rather paste 5. Signing up for something new? Once the page moves on, a small card asks whether to save that login; check the project and press Save. The popup's Save button does the same by hand Security: - Passwords are encrypted with AES-256-GCM and only ever decrypted on the server - Two-factor secrets are encrypted the same way and never leave the server; only the six-digit code does - QR codes are read inside your own browser — the picture is never uploaded - Your secret key unlocks the vault and is asked for again after a week without use - No passwords are stored in the extension itself - On a web page the extension does nothing until you click into a login field; a password is put into the page only when you click an entry in the list, and a login you typed is stored only when you press Save on the card that offers it Requires an account on a Share Credentials team. Get started at https://share-credentials.com