PassMan Enterprise Vault Extension

About

PassMan Enterprise Vault Extension connects Chrome and Edge users to a self-hosted PassMan
  Enterprise Vault server.

  The extension helps approved users fill login forms, copy secrets securely, generate strong
  passwords, and work with encrypted vault snapshots from their own PassMan server. It is designed for
  organizations that run PassMan on their own Windows Server and want a browser-side helper for
  controlled vault access.

  Key capabilities:

  - Pair the browser extension with a PassMan server through an operator-approved device flow.
  - Unlock the extension locally with an extension PIN.
  - Sync encrypted vault snapshots from the approved PassMan server.
  - Show active-site autofill suggestions for matching login records.
  - Fill username and password fields from approved vault entries.
  - Copy usernames, passwords, URLs, and generated values with secure clipboard handling.
  - Generate passwords, passphrases, and usernames for operator workflows.
  - Run optional password exposure checks only when the user requests them.
  - Support Chrome and Edge managed rollout for enterprise environments.
  - Show extension version, server package status, and managed update state from the About view.

  Security model:

  PassMan is self-hosted. The extension receives encrypted vault data from the PassMan server and
  decrypts it only inside the approved browser runtime after local unlock. The extension does not
  persist a plaintext secret cache. Pairing material and the extension private key are protected
  locally with the extension PIN. Copy, view, fill, and sync actions are designed to preserve the
  PassMan audit and access-control boundary.

  Password exposure checks are optional and manual. When used, the extension performs a k-anonymity
  style range check and does not send the full password to the external service.

  This extension is intended for PassMan Enterprise Vault deployments and should be installed by users
  or administrators who already operate a PassMan server.