Vault Password Manager

Fill logins from Vault KV v2. Save a password after sign-in. Choose an account on the field. Secrets stay in your Vault.

Fill logins directly from HashiCorp Vault KV v2. Zero telemetry, zero intermediate relays—your credentials stay inside your private infrastructure. Vault Password Manager is a secure, developer- and enterprise-first Chrome extension that turns your existing HashiCorp Vault cluster into a seamless in-browser credential manager. Fill logins, generate strong passwords, scan TOTP two-factor QR codes, and save new accounts on the fly without ever exposing secrets to third-party proprietary vaults. 🛡️ Why Vault Password Manager? Most password managers store your encrypted blobs on their own cloud infrastructure. Vault Password Manager does not: Zero-Relay Architecture: Your browser communicates directly with your HashiCorp Vault instance over encrypted TLS. No relay servers, no analytics trackers, and no middleman. Your Infrastructure, Your Rules: Secrets are stored directly in your Vault KV v2 engine (password-manager/* mount or custom path) under your corporate access policies and audit logs. Zero Telemetry & Strict Privacy: Built strictly under Manifest V3 without invasive background telemetry or DOM snooping. ✨ Key Features 🔑 In-Field Smart Autofill Seamlessly detects login, username, and password fields on any web page. Provides a discrete in-field account picker when multiple accounts match a domain. Flexible domain matching: supports root domains, exact hosts, or multi-tenant subdomains. 💾 One-Click Save & Update Detects authenticated logins and offers to store new credentials directly into Vault without switching tabs. Updates existing entries cleanly in Vault KV v2 versioned secrets. ⏱️ Built-in 2FA / TOTP Authenticator Calculates local RFC 6238 TOTP codes in-browser every 30 seconds. Built-in on-page QR code scanner to import TOTP seeds directly into your Vault secrets without needing a separate authenticator app. One-click clipboard copy with automatic clipboard clearing for security. 🔐 Flexible Master Key Protection Local Master Key: Derive an on-device encryption key via salted PBKDF2 stored only inside your browser instance. VaultPass Cloud Mode: Centrally authenticate with your VaultPass Cloud account for effortless synchronization across multiple workstations and browsers. 🏢 Enterprise Authentication Methods Userpass Auth: Native Vault username and password accounts. LDAP / Active Directory: Authenticate directly against corporate directories via Vault LDAP auth. Vault Client Token: Use ephemeral or service tokens (hvs... / s...) with automated policy validation. 🔒 Security & Auto-Lock Configurable auto-lock timers (immediate, 5 min, 10 min, 30 min, 1 hour, or 2 hours). Hardened clipboard memory hygiene and sanitized extension state during browser sleep. 🚀 Quick Setup (3 Steps) Enable KV v2 & Auth on Vault: Run vault secrets enable -path=password-manager kv-v2 and enable your preferred auth method (userpass or ldap). Apply Policy: Apply the auto-generated HCL access policy provided in the extension's Setup Guide. Connect & Fill: Enter your Vault cluster URL in the extension options, sign in, and start filling logins effortlessly. 📋 Permissions Transparency storage: Persists local connection preferences and encrypted cache in secure local extension storage. activeTab / scripting: Inserts credentials only into active login forms when triggered by the user. alarms: Enforces auto-lock timeouts and refreshes expiring TOTP tokens. declarativeNetRequest: Secures direct communication with your configured Vault API endpoints. 🌐 Support & Documentation Website: https://vaultpass.odrisystems.com Documentation & FAQ: https://vaultpass.odrisystems.com/#faq Built by ODRI Systems