TorrinPass

TorrinPass Chrome extension (phone as secure root)

TorrinPass is a secure password manager that uses your iPhone as the encrypted vault and approval device. This extension lets you autofill logins in Chrome while keeping your master password and vault keys safely on your phone. When you install the extension and pair it with the TorrinPass iOS app, Chrome becomes a thin client: it asks your phone for just the credentials it needs, and your phone stays in control of unlocking and approvals. KEY FEATURES • Autofill passwords on the sites you visit – See suggested logins that match the current website – Autofill usernames and passwords into login forms – Works in iframes and embedded login forms where supported • Use your iPhone as the secure root of trust – Your master password and vault encryption keys stay on your phone – The extension talks to your phone over an end‑to‑end encrypted relay – Unlock and approval decisions are made on the device you control • Approve browser requests from your phone – Approve or deny unlock requests from the TorrinPass app – Optionally re‑require approval after a period of inactivity – Lock browser sessions remotely from your phone • Save new logins from the browser – Detect new logins after you sign up or change a password – Propose creating a new entry in your TorrinPass vault – Changes are synced so they’re available on your phone HOW IT WORKS Install the TorrinPass iOS app and create or unlock your account. Install this Chrome extension and open the popup. Pair the extension with your phone following the in‑app instructions. Once paired and unlocked, the extension can: – Request matching logins for the current website – Ask your phone to reveal and return encrypted credentials – Propose saving new logins back into your vault At all times, the TorrinPass mobile app remains the source of truth for your encrypted vault and session state. SECURITY AND PRIVACY TorrinPass is designed with security and privacy as first principles: • End‑to‑end security model – Vault contents are encrypted before leaving your phone – The browser extension never sees your master password – Communication between the extension and your phone uses cryptographic keys derived per pairing • No tracking or advertising use of your data – Data accessed via the extension is used only to provide password manager functionality – We do not use your vault contents for analytics or advertising • Transparent behavior – The extension only reads page content needed to detect login forms and autofill fields – You stay in control of when the vault is unlocked and when a browser session should be locked again For full details, please refer to the TorrinPass privacy policy and security documentation linked from the mobile app and project website. PERMISSIONS EXPLAINED This extension requests the following permissions: • “Read and change data on websites you visit” (host permissions) – Needed to detect login forms and offer autofill suggestions – Used to fill usernames and passwords into fields when you choose a login – Not used for tracking your browsing history for advertising • “Tabs” – Used to identify the active tab and its URL so the extension can fetch matching logins for the right site – Also used to focus or refresh the current page when needed after autofill • “Storage” – Used to store local configuration such as pairing information and extension settings – Does not store your master password; vault keys remain on your phone REQUIREMENTS • TorrinPass iOS app (latest version recommended) • A TorrinPass account and an unlocked vault on your phone • Google Chrome or a Chromium‑based browser that supports Manifest V3 Install the TorrinPass extension, pair it with your phone, and enjoy secure password autofill in Chrome with your iPhone as the hardware‑backed root of trust.