Sesame

Fills one verified sign-in form after explicit approval in the Sesame desktop app.

Sesame is a password manager for Windows and Linux that keeps your vault on your own computer. This extension is its browser half. It does not hold your passwords. When you want to sign in, it asks the Sesame desktop app, and the app asks you before anything is filled. How it works 1. Open the extension, press the keyboard shortcut or right-click a field and choose Fill with Sesame. 2. Sesame checks which site you are on and asks you to approve this one fill. 3. The password goes into the page and the extension forgets it. It never submits the form for you, so a fill cannot log you in by itself. What it can fill Logins, one-time codes for sites that use them, payment cards, and name and address details. On a sign-up or password change page, you can choose Save this login, and the desktop app asks you to approve the save. What stays private The extension stores no passwords, usernames or vault entries in the browser, and it sends nothing to any server. Everything goes to the Sesame app on your own computer. It reads the fields on a page only when you start a fill or choose Save, and it does not watch your browsing or look at pages in the background. An optional button on sign-in fields needs one extra permission that you can allow or remove at any time. The extension works without it. You need the Sesame desktop app Install it from usesesame.app or github.com/usesesame/sesame-desktop/releases/latest, create or open your vault, and then use the extension. Without the app, the extension has nothing to fill. Sesame is free and open source under the AGPL. The code for the extension, the app and the protocol between them is at github.com/usesesame.