Modern phishing often does not need to break cryptography. It needs you to trust a prompt that looks like your password manager on a page that looks like your bank. Autofill trains that reflex: a familiar overlay appears, you accept, and the credential is gone before you finish reading the URL.
Browser extensions sit in a powerful place. They can read pages, inject UI, and hold long-lived access to your session. That convenience is exactly why they are a favorite target — and why autofill has become part of the phishing playbook, not just a usability feature.
Deliberate retrieval as a feature
Vault App stays out of the browser autofill layer on purpose. You unlock in the app, find the item, and copy what you need. The friction is mild. The difference is that a fake site cannot lean on an ambient “Vault wants to fill this form” habit that attackers have learned to mimic.
Intentional retrieval also keeps secrets out of the extension permission model. An always-on script with access to every tab is a high-value compromise. A vault that waits for you is harder to hitch to a trap running in a random tab.
What this does not fix
You can still paste a password into the wrong site. You still need to read the domain, prefer bookmarks over unexpected links, and treat surprise login pages with suspicion. Removing autofill removes a class of help the attacker was counting on — not the need for attention.
MFA, unique generated passwords, and device hygiene still matter. Phishing kits evolve. The goal is to shrink the easy paths: spoofed overlays, over-privileged extensions, and credentials that appear without a conscious act.
Security as subtraction
A lot of “security by design” is subtraction: fewer privileged scripts, fewer ambient prompts, fewer places secrets appear without intent. Autofill feels like progress until you notice how often malware and phishing want exactly that automation.
Vault App optimizes for a smaller blast radius over maximum convenience inside the browser. If you want autofill everywhere, other tools optimize for that. If you want secrets to stay out of the places that get compromised most often, deliberate unlock is the point — not a missing feature we forgot to ship.