Tiimi Password Vault

Tiimi Password Vault lets teams share login credentials without anyone seeing the actual passwords. Credentials are encrypted on your device before they ever leave the browser — your vault password is never sent to the server.

HOW IT WORKS

1) Connect to your Tiimi server and create a vault password
2) Your encryption keys are generated locally in the browser
3) Admins assign credentials to team members
4) Click "Fill" or "Login" to autofill — passwords stay hidden

KEY FEATURES

Autofill & Auto-Login

- One-click autofill on any website
- Auto-login opens the site and fills credentials automatically
- Works with multi-step logins (Google, Apple, Microsoft, Amazon)
- Supports login forms inside iframes and Shadow DOM

Zero-Knowledge Security

- Passwords are encrypted client-side using your vault password
- The server never sees plaintext passwords
- Vault password never leaves your browser
- Credentials are wiped from memory after use

Password Visibility Protection

- Filled passwords stay masked — "show password" eye icons are blocked
- Prevents accidental exposure of shared credentials

Team Management

- Admins control who can access which credentials
- Time-limited access with automatic expiration
- System Master Password for admin approval workflows
- Recovery flow if a user forgets their vault password

Smart Credential Detection

- Detects login forms automatically across websites
- Groups credentials by domain for quick access
- Search and filter across all your shared credentials
- Save new credentials directly from login pages

Security Hardening

- Blocks credential delivery when browser DevTools is open
- Strict Content Security Policy
- No third-party scripts or remote code execution
- All communication validated against your configured server

GETTING STARTED

- Install the extension
- Click the extension icon and enter your Tiimi server URL
- Connect with your Tiimi account
- Create your vault password
- Start using shared credentials

REQUIREMENTS
A Tiimi user account with vault access

PRIVACY
This extension only communicates with the Tiimi server you configure. No data is sent to third parties. All encryption happens locally in your browser. Your vault password and private keys never leave your device.