Using the VerityVault Browser Extension

1. Get started

Install the extension for Chrome or Firefox from the links on our browser extensions page. Open it from your browser toolbar, sign in to VerityVault, and unlock your vault with your vault passphrase when prompted.

Your sign-in password and vault passphrase serve different purposes. Keep both private, and sign out of the extension when you have finished using it on a shared computer.

2. How password detection works

The extension looks for sign-in fields on websites you visit, including forms that appear after the page loads. When you submit a login, it can detect the username and password and offer to save them. It can also offer to update a saved entry when its password changes.

1. Sign in to a website as you normally would. Some sites ask for your username and password on separate screens.
2. If the extension offers to save or update the credentials, review the website and account shown in the prompt.
3. Choose Save credentials or Update password to keep them, or Not now to dismiss the prompt. You can also choose Never for this site to stop save prompts for that site.

The extension needs access to website pages to recognize sign-in fields and temporarily read the values involved in save and fill actions. Credentials you choose to save are encrypted in the browser before they are stored in your vault. Detection depends on the website’s form, so a prompt may not appear on every site.

3. How autofill works

1. Visit the website and make sure you are signed in to the extension and your vault is unlocked.
2. Use the VerityVault icon beside a recognized login field to see matching saved credentials. If you have more than one account, select the one you want.
3. Check the filled details and submit the website’s sign-in form. Where supported, a saved authenticator can also provide a current verification code.

The extension uses the saved website address to find matching entries. Always check the address in your browser before filling a password. Unusual forms or browser restrictions can prevent detection or filling; you can open the extension and copy the details instead.

4. Manage your credentials

Open the extension popup and select Manage your Vault to open Your Secure Vault. The credentials screen lets you review your entries and use New Credential to add one. You can open an entry to view its details and edit its name, password, and custom attributes. The website hostname cannot be changed in the edit dialog. Authenticator setup is available on supported entries.

Keep the website address accurate so the extension can offer the right account when you return. Shared credentials may also appear alongside your personal entries, depending on what has been shared with you.

5. Use the extension as an authenticator

The extension can generate time-based one-time passwords (TOTP) for supported websites, alongside a personal credential. This is for signing in to those websites; it is separate from the two-factor authentication used to sign in to VerityVault itself.

1. On the website you want to protect, start authenticator-app setup in its security settings. Find the manual setup key, sometimes offered as an alternative to scanning a QR code.
2. Sign in to the extension and unlock your vault. Open the matching personal credential in the popup and choose Add TOTP, or open Manage your Vault and choose Set up authenticator for that credential.
3. Enter the website’s setup key and choose Save. The popup can extract the secret from an otpauth:// setup URI; it uses the extension’s default code settings, so check that the generated code works with the website. The extension stores the key encrypted with the credential; it does not scan the website’s QR code.
4. In the popup, choose Get TOTP for that credential. Enter the current code on the website to finish its setup. Codes refresh over time, and you can copy the current code or select the credential to fill a recognized verification field where supported.

For an existing personal credential, the credentials screen also lets you edit or remove the authenticator setup. Keep the website’s recovery codes somewhere safe: removing the setup from VerityVault does not turn off two-factor authentication on the website. The JSON export described below does not include authenticator setup keys.

6. Import credentials in bulk

Use Upload on the credentials screen to bring in multiple entries from a compatible JSON file. This tool accepts a VerityVault export or a JSON array in the format shown in the upload dialog; it does not directly import CSV files.

1. Choose Upload and review the sample JSON. Each entry needs a name, url, and username; password and customAttributes are optional.
2. Choose your .json file. Review any invalid or duplicate entries reported from the file.
3. Select the valid entries you want and choose Import Selected. The imported entries are saved as personal credentials. Check the result for any failures.

Duplicate checks in the upload review identify repeated name and username, or URL and username, within the selected file. Review your existing vault entries separately to avoid unwanted duplicates.

7. Export your credentials

1. On the credentials screen, choose Download All.
2. Enter your vault passphrase to confirm, then choose Download. Your browser will let you choose a location or use its default downloads folder.
3. Keep the resulting JSON file in a secure location and remove extra copies when they are no longer needed.

The exported JSON is not encrypted. It can contain readable usernames, passwords and custom attributes, including entries shared with you. Anyone who can open the file can read those values. The export does not include authenticator setup data; keep a separate secure recovery method for your authenticator accounts.

The export may skip entries it cannot retrieve. Review the downloaded file and the displayed export count before relying on it as a backup. Importing an exported shared entry creates a personal entry; it does not recreate the original share.