Lockyt

About

Extension description:

Lockyt — Password Autofill & Vault Access

Lockyt is a secure password manager built around zero-knowledge encryption. 
This extension brings your Lockyt vault directly into your browser, 
automatically filling your credentials on any website — without ever 
exposing your passwords to our servers.

HOW IT WORKS ───────────────────────────────────────

1. Sign in with your Lockyt account
2. Enter your master password to unlock your vault
3. Visit any website with a login form
4. Lockyt detects the form and fills your credentials instantly

If you have one saved login for a site, it fills automatically.
If you have multiple, a clean popup lets you choose which one to use.

 SECURITY FIRST ─────────────────────────────────────

- Zero-knowledge architecture — your master password never leaves 
  your device and is never sent to our servers

- AES-256-GCM encryption — all passwords are encrypted client-side 
  using military-grade encryption before being stored

- PBKDF2 key derivation — 600,000 iterations of SHA-256 to protect 
  against brute-force attacks

- No plaintext storage — even if our servers were compromised, 
  attackers would only find encrypted ciphertext

- In-memory key — your decryption key lives only in memory and is 
  cleared when you close the browser

FEATURES ───────────────────────────────────────────

✓ Automatic form detection on any website
✓ Smart autofill — auto if 1 match, choose if multiple
✓ Supports passwords, usernames, and email addresses
✓ Works with React, Angular, Vue, and standard HTML forms
✓ Syncs in real-time with your Lockora vault
✓ Session management — stays unlocked until you close the browser
✓ Clean, minimal popup that stays out of your way

WHAT THIS EXTENSION DOES NOT DO ────────────────────

✗ Does not track your browsing history
✗ Does not send any data to third parties
✗ Does not store your master password anywhere
✗ Does not inject ads or modify page content beyond form filling

PERMISSIONS EXPLAINED ──────────────────────────────

- activeTab — to detect login forms on the current page
- storage — to remember your session across popup opens  
- scripting — to inject the autofill script into pages
- host_permissions (<all_urls>) — required to detect and fill 
  login forms on any website you visit

GETTING STARTED ────────────────────────────────────

You need a Lockyt account to use this extension.
Create one free at: https://lockyt.vercel.app

SUPPORT ────────────────────────────────────────────

Found a bug or have a question?
Contact us at: [email protected]