Claspt — Password Auto-Fill

Companion extension for the Claspt desktop password manager — auto-fills credentials on web pages from your local vault.

Claspt brings your encrypted vault to the browser. Fill logins, keep every login you type, fill your name and address, use passkeys and two-factor codes, generate strong passwords, and be warned about reused ones. All of it connected to the Claspt desktop app on your own machine. YOUR VAULT, YOUR BROWSER Claspt is a local-first password manager. Your passwords stay encrypted on your device and are never uploaded to any cloud. The extension talks to the Claspt desktop app running on your machine over a local connection (loopback only, http://127.0.0.1). Nothing else. You will be asked once for permission to talk to your own computer. No browsing data ever leaves your device. REQUIRES CLASPT 4.1 OR LATER The extension is a companion to the Claspt desktop app for macOS, Windows and Linux. The app is free. Download it from https://claspt.app, then pair the extension from Settings > Integrations, or during the app's first-run setup. Extension 3.1 does not connect to desktop versions older than 4.1; it tells you which version it found. NEW IN 3.1 • A login you type is kept the moment you submit it. A redirect, a second factor, a lock or a crash cannot lose it. • The right account is updated. An update is offered only for the same account; a second account on the same site is saved as a new login. • The toolbar icon says what is wrong, and how many logins are waiting to be saved. • Pair from Settings in the desktop app, not only during first-run setup. • Every generated password is kept in your vault, encrypted, with a history of what you used. FEATURES 🔑 Fill logins • Inline icon inside username, email and password fields, with a count of matching logins • Match tiers ("Best match", "Same site", "Other matches") so you see why each login is suggested • Matching by exact URL, hostname or registrable domain, using the Public Suffix List, so sites that share a hosting domain are kept apart • Multi-step logins (Google, Microsoft): the email from step one is remembered for step two • Folder-grouped headers when matches span more than one vault folder • Per-login match policy: base domain, exact hostname, exact URL, or never fill 💾 Never lose a login you type • Saved to the vault the moment you submit the form, before the site redirects or asks for a code • The bar asks what to make of it and returns on every page of the site until you answer; the popup lists what is waiting • If the app is not running, the login is kept in the extension and written when the app is back • A password the site plainly rejects is dropped 👤 Fill who you are • Save an identity once and signup and checkout forms fill themselves: name, email, phone, two address lines, city, state, postcode, country, organisation • Keep more than one, a home one and a work one; the identity you used on a site is offered first next time • Only which identity you picked is remembered, never any of its values • Cards you keep in the vault are shown under Credit Cards with their brand 🔐 Passkeys and two-factor codes • Passkeys are stored in your vault and offered on sites that ask for one • Two-factor codes sit beside the password they protect, with a live 30-second code and a timer • Set one up by scanning the QR code on the page • Copy with one click, or paste the code automatically after the password (a setting) ✏️ Manage logins in the extension • Edit username, password and any field inline in the popup • Add and remove custom fields; add a new login from a template (login, API key, SSH key, card, licence, database and more) • Rename a label, move to a folder, create a folder inline, delete with confirm • Mark as primary, mark as deprecated, pin to top, and keep a note per login • Desktop wins on conflict: if the desktop changed the login since you opened it, the extension steps back and tells you. No silent overwrites. ⚡ Generator • Password, passphrase, memorable, PIN and UUID, the same generator as the desktop app and the phone, with the same results • Length, character sets, exclude look-alike characters, and a limit on symbols for sites that accept only a few • Right-click any field to generate a password straight into it 🕒 Every generated password is kept • Saved in your vault, encrypted, whether or not you go on to use it, so a password you generated and then wanted back is still there • Copying or filling one marks it as used; each login lists the recent passwords used on that site • A History tab shows them newest first with where each came from • Clear unused entries older than thirty days whenever you like; nothing is removed on its own • Survives a vault lock, a browser restart and a reinstall, and is shared with the desktop app ⚠️ Reused-password warning • A badge on every login that shares a password with another, and a banner with the total • Comparison is done on your device with the Web Crypto API; passwords never leave it 🛡️ Security built in • The in-page picker and save bar are fully isolated from the page: the site cannot read them, operate them, or reach inside • Refuses to work inside cross-origin frames • A warning when the page does not match the saved address, and a note when a login has no address to check • Excluded sites: Claspt stays out of them completely • Lock on browser close, and clipboard auto-clear (30 seconds by default) 🧭 The toolbar icon says what is wrong • Hover text for every state: app not running, vault locked, key refused, permission needed • A dimmed icon when it cannot fill, and the count of logins waiting to be saved • The inline picker says why a list is empty 📋 Right-click anywhere • Fill with Claspt, using the best-matching login • Generate password into this field • Copy username or copy password for this site PRIVACY • Zero telemetry. The extension never reports usage, errors or any data to any server. • Zero third-party calls. Every request goes to http://127.0.0.1, your own machine. • Zero analytics SDKs. None bundled. • The source is published under the PolyForm Shield licence for anyone to read. CROSS-PLATFORM Works in Chrome, Edge, Brave and other Chromium browsers, on Windows, macOS and Linux. LEARN MORE • Documentation: https://docs.claspt.app/guides/browser-extension/ • Connection troubleshooting: https://docs.claspt.app/reference/connection-troubleshooting/ • Desktop app: https://claspt.app