[[toc]]

Since there is no API to manage or store credentials securely, usernames and passwords are stored in the web extension's sync storage. This will sync your credentials to all browsers you are logged into if sync is enabled for addons. Therefore, any computers you use a synced browser on will write the credentials to the file system in plain text.

• Credentials are stored locally in your browser's extension storage.
• If browser sync is enabled, credentials sync across all devices logged into the same browser account.
• Synced data may be written to disk in plain text on each synced device.
• The developer never receives, processes, or has access to any data or credentials.

If there is enough popularity/requests for these features, there are a couple options to mitigate the risks:

• Option to switch between sync and local storage to limit credentials to a single computer.
• Option to encrypt credentials using a password that must be entered once every session.

For more details see the PRIVACY.md.