Browser extensions sit in one of the most privileged seats in consumer software. They can read page content, intercept forms, inject interfaces, and persist across the sites you visit every day. That power is why autofill feels magical — and why extensions are a favorite target when a store listing, update channel, or dependency is compromised.
Vault App is built outside that layer on purpose. You unlock in a dedicated application surface, retrieve what you need, and keep credentials out of the extension permission model. It is a deliberate trade: slightly more friction for a smaller blast radius.
The attack surface you do not install
An always-on script with access to every tab expands what an attacker wins if they hijack the update path or trick you into installing a lookalike. Autofill also trains users to trust prompts that appear on login pages — an attack surface phishing kits routinely exploit with convincing overlays.
By keeping vault access inside a controlled application context, credential use stays intentional. Secrets are unlocked when needed, copied or applied deliberately, and never continuously exposed to the browser’s broader execution environment.
What we optimize for instead
Vault App favors explicit unlock, deliberate retrieval, and a smaller trusted computing base over ambient autofill across the open web. Convenience that requires injecting secrets into the browser is treated as a security tradeoff — not a default roadmap item.
You still get a full vault: passwords, secure notes, cards, generation, MFA, and encrypted export on Enterprise. You do not get a permanent bridge between those secrets and every page you open. That omission is the feature.
Choosing the tradeoff
If maximum convenience inside the browser is your top requirement, other tools optimize for that and accept the extension model. If you want secrets kept away from the places that get compromised most often, staying out of the autofill layer is a coherent design — not a gap in the changelog.
Security products reveal their priorities by what they refuse to ship. Vault App refuses to make the browser the default home for your vault. Unlock when you mean to. Keep the rest sealed.