PassMan Enterprise Vault Extension

Enterprise Vault helper for autofill, secure copy, optional password exposure checks, and managed Chrome/Edge rollout.

PassMan Enterprise Vault Extension connects Chrome and Edge users to a self-hosted PassMan Enterprise Vault server. The extension helps approved users fill login forms, copy secrets securely, generate strong passwords, and work with encrypted vault snapshots from their own PassMan server. It is designed for organizations that run PassMan on their own Windows Server and want a browser-side helper for controlled vault access. Key capabilities: - Pair the browser extension with a PassMan server through an operator-approved device flow. - Unlock the extension locally with an extension PIN. - Sync encrypted vault snapshots from the approved PassMan server. - Show active-site autofill suggestions for matching login records. - Fill username and password fields from approved vault entries. - Copy usernames, passwords, URLs, and generated values with secure clipboard handling. - Generate passwords, passphrases, and usernames for operator workflows. - Run optional password exposure checks only when the user requests them. - Support Chrome and Edge managed rollout for enterprise environments. - Show extension version, server package status, and managed update state from the About view. Security model: PassMan is self-hosted. The extension receives encrypted vault data from the PassMan server and decrypts it only inside the approved browser runtime after local unlock. The extension does not persist a plaintext secret cache. Pairing material and the extension private key are protected locally with the extension PIN. Copy, view, fill, and sync actions are designed to preserve the PassMan audit and access-control boundary. Password exposure checks are optional and manual. When used, the extension performs a k-anonymity style range check and does not send the full password to the external service. This extension is intended for PassMan Enterprise Vault deployments and should be installed by users or administrators who already operate a PassMan server.