Browser extension for Chrome and Firefox

Autofill without a second vault in your browser. The extension asks the Buddy desktop app for credentials over your operating system's local native-messaging channel.

Open source (GPL-3.0) brandnewbyte/buddy-extension

Works with the Buddy desktop app on the same computer. Download Buddy

How it finds the right fields

Login forms vary widely across sites and frameworks. Buddy groups related inputs and scores several signals instead of trusting one label or autocomplete attribute. It is tested against captured fixtures for ordinary forms, multi-step logins, formless applications, registration pages, hidden decoys and TOTP steps.

Desktop-initiated fill

Launch a site from the desktop app in one click and it's filled automatically.

Extension-initiated fill

Click on a login form, and Buddy will check for matching entries based on the current page URL.

Multi-page fill sessions

Sign-in flows that ask for your username first and your password on the next screen are treated as one session, so the second page picks up where the first left off instead of making you start over.

Single-use fill tokens

A fill session holds a single-use token, rotated every time it's redeemed. Secrets are only fetched at the moment of fill and aren't long-lived.

Scored fields

Inputs are grouped by their form, or by their nearest shared ancestor for the formless kind that modern frameworks produce, then ranked on weighted signals rather than a single label match.

Offers to save new logins

Sign up somewhere and Buddy offers to keep it, picking up the site's icon along the way. If you have more than one vault open, you choose where it lands.

Setup

  1. 1

    Install the extension

    Add it from the Chrome Web Store or Firefox Add-ons using the links above. Buddy needs to be installed on the same computer.

  2. 2

    Approve the connection

    The first time the extension connects, the desktop app asks you to approve it. The app answers only while a vault is unlocked.

  3. 3

    Revoke it any time

    Approved browsers are listed in the desktop app under Settings → Browser Extension, where you can remove them.

How the connection is authenticated, and what the extension can and cannot receive: Security model: browser extension