Remote Fill

Secure field transfer

Send one credential. Keep the vault.

Fill one field on another computer without installing or synchronizing your password manager there.

Add to ChromeWeb transfer

Generate password

One-time encrypted transfer architecture A phone endpoint encrypts one value, an opaque relay carries ciphertext, and the selected browser field decrypts it. ONE-TIME TRANSFER / ACTIVE ROUTE 02:00 MAX PHONE ENDPOINT ENCRYPTS ONE VALUE OPAQUE RELAY CIPHERTEXT ONLY SELECTED FIELD DECRYPTS + INSERTS P-256HKDF-SHA-256AES-256-GCMSINGLE USE
Encrypted at the endpoints. Unreadable in transit.

Smaller credential exposure

Reduce the credential footprint.

Only the selected value crosses the boundary. The destination computer never receives the collection it came from.

  • No vault sync

    The destination receives one value, not a credential collection.

  • Encrypted in transit

    The relay never receives an endpoint private key.

  • Replay resistant

    The first phone claims the route; delivery consumes it.

  • Short lived

    Unused transfers expire automatically after two minutes.

Endpoint cryptography

Designed so the service cannot decrypt.

The browser creates a one-time public key. Your phone encrypts specifically for that browser, while the relay carries only the authenticated envelope.

  • P-256 ECDHKey agreement
  • HKDFSHA-256 · Key derivation
  • AES-256-GCMAuthenticated encryption

One value. One field.

Move it without moving the vault.

Add to ChromeWeb transfer

Development build