Browser extension

The Rivo passwords extension fills logins, passwords and 2FA codes from your vault, generates passwords and offers to save new ones. It works in Chrome, Firefox 140+ and Safari on macOS.

It will appear in the extension stores later. Until then it is installed from a build (ask at [email protected]):

• Chrome: chrome://extensions → Developer mode → Load unpacked.
• Firefox: about:debugging → This Firefox → Load Temporary Add-on; it lives until the browser restarts. In about:addons → Rivo → Permissions, allow access to all sites — autofill and the connection to the server don't work without it.
• Safari: the extension comes inside a small macOS container app — launch it once. The build isn't signed, so turn on "Allow unsigned extensions" in the Develop menu (the flag resets every time Safari restarts), then in Safari → Settings → Extensions enable the Rivo passwords extension and choose "Always allow on every website".

Pairing with your Rivo

On the pairing screen:

1. Server address — for the Cloud https://name.me.rivo.day, for your own installation your domain. HTTPS is required.
2. Device name — e.g. "Chrome on Mac": that's how the browser appears in the device list.
3. PIN — the same as the dashboard's. If your account has a passkey you also need a one-time code: Settings → Access → Extension code (valid for 10 minutes).

Too many wrong PINs in a row lock entry from that address for 15 minutes; browsers already paired keep working.

If the instance sits behind Cloudflare Access: in the dashboard go to Settings → Access → Devices → Add device → Copy, then in the extension settings open the Cloudflare Access section, paste and save the token.

How autofill works

• On page load the extension only fills an entry whose address matches the site, and only if that's enabled in its settings (filling at once on a single match is off by default).
• An entry from another site is filled only after you explicitly confirm.
• A personal end-to-end encrypted entry has to be confirmed once per new site in the extension window: click "Fill" on the entry — the extension shows the site and where the entry was filled before. The browser remembers the confirmed site; there the entry fills as usual, including on page load. A password saved from a site's form confirms that site right away. Why — see Vault and end-to-end encryption.
• A copied password is wiped from the clipboard after 30 seconds — in Chrome and Firefox even after the extension window closes. In Safari only while the window is open: after pasting, close it or copy something else.

Shortcuts: Ctrl+Shift+L (Cmd+Shift+L on a Mac) fills the login and password, Ctrl+Shift+K (Cmd+Shift+K) opens the vault. In Safari, assign the keys yourself.

Fields inside a closed shadow DOM, contenteditable fields, virtual keyboards and masked fields that cut off pasting aren't filled.

Extension settings

• Lock — after 1, 5, 15 or 30 minutes or an hour of inactivity, or only when the browser closes.
• Autofill — show the key icon in sign-in fields, fill at once on a single match, offer to save new passwords.
• Ignored sites — one domain per line: the extension stays out of them.

What the extension can open

The extension's token opens only the vault. Finance, calendar, servers, vault export, deleting entries and the device list are closed to it.

Unlinking

• From the dashboard: Vault → ⋯ → Devices → Unlink. The extension stops reaching the vault.
• From the extension itself: Settings → unlink this browser. To change the server address, unlink the browser and pair it again.

If foreign code may have run in the browser, unlinking isn't enough — also use "Revoke access" in Vault → Encryption keys.