NoteKrypt Browser Extension by FEMEX Ventures LLC

NoteKrypt Browser Extension connects your browser to the NoteKrypt desktop app on your computer. Autofill your saved logins, save new or changed ones, and clip web pages into encrypted notes.

How it keeps your vault safe
• Your vault stays in the NoteKrypt app. The extension keeps no passwords, notes or keys. It saves only its own settings, on your computer: the sites where you turned the in-page menu off; the shape of each site's sign-in form — the fields' names and labels, and whether the sign-in takes more than one step — so it finds them again; and a short hash of which login you used there. Never a password, a code, or anything you type.
• Your vault never travels over the network through the extension. It talks only to the NoteKrypt app on your own computer (127.0.0.1); the one other thing it fetches is the icon of the site you are on. When you clip a page, it first lets that page finish loading its own images.
• Nothing runs that isn't in the package. The extension loads no remote code.
• A locked vault gives nothing. While NoteKrypt is locked, the app hands the extension no logins at all.
• Suggestions come without passwords. The list of matching logins and the badge count are worked out without sending any password.
• Only the right site. A login is filled only on the website it belongs to, or on another domain of the same company (its .com and its country domain, for instance). A look-alike domain, with the same name and a different ending, never gets your login, and neither does another site's frame embedded in the page.
• Passkeys are saved only for the site you're on. A passkey a page reports is kept only when it belongs to the site you are on.
• Saving a password is your call. The offer appears after you submit a form yourself, and nothing is written until you press Save.
• Short-lived. Credentials used for a fill are dropped when it finishes; a sign-in spread over several pages can use them for 90 seconds at most.

Why it asks for these permissions
• Access to the websites you visit: to find login fields and show Autofill on any site where you keep a login, and to clip a page when you choose Clip Page.
• Active tab: to act on the page you are on when you click the extension.
• Scripting: to run the extension's own bundled scripts on the page (no remote code).
• Tabs: to know which site the current tab is on, so it can match the right login.
• Native messaging: to talk to the NoteKrypt app on your computer.
• Context menus: for the Clip actions in the right-click menu.
• Alarms: to send the NoteKrypt app a short heartbeat once a minute, so the app can show whether this browser is connected and whether the extension has an update.

NoteKrypt is an end-to-end encrypted workspace for notes, tasks and passwords, made by Femex Ventures LLC. The extension needs the NoteKrypt desktop app. On iPhone, NoteKrypt fills logins through the system's own Password AutoFill instead.

Firefox lists authentication information, browsing activity and website content as data this extension handles: it does, on your own computer only, to fill and save logins and to clip pages. None of it is sent anywhere but the NoteKrypt app on your computer.

Privacy policy: https://notekrypt.app/privacy/