SaaSPass browser extension

The SaaSy browser extension brings SaaSPass and your CRM into the tab you are working in. It fills your saved logins and 2FA codes, saves new logins, signs you in with passkeys, and fills payment cards. It can also save a web page as a CRM record or clip it into SaaSy.

Everything it does happens inside your SaaSy workspace. Your role and your plan apply, just as they do in the SaaSy web app.

Beta

The extension is in beta. The Chrome Web Store listing is unlisted during the beta, so you install it from a link SaaSy sends you rather than by searching the store.

Install the extension

You need a SaaSy account with SaaSPass, and one of these browsers:

Browser	What to install
Google Chrome	Version 116 or later. Open the install link and select Add to Chrome.
Microsoft Edge	Edge runs the Chrome version. Open the same link and allow extensions from other stores when Edge asks.
Mozilla Firefox	Version 128 or later. Open the Firefox install link and select Add.

After installing, pin the SaaSy icon to your toolbar so the popup is one click away.

Sign in

1. Sign in to SaaSy in the same browser first. The extension uses that session to approve itself.
2. Select the SaaSy icon, then Sign in at the bottom of the popup.
3. A sign-in window opens and asks you to approve SaaSy Browser Extension. Select Approve.

The popup now shows signed in at the top. The extension keeps you signed in and renews its access on its own. To sign out, select Sign out at the bottom of the popup.

If you were not signed in to SaaSy, the window asks you to sign in first and then returns to the approval step.

Permissions and why they are needed

The extension asks for these permissions when you install it. Your browser may show only some of them in its install prompt.

Permission	Why the extension needs it
Access to the current tab	Finds the logins saved for the site you are on. It reads or fills a form only after you open the popup or press the shortcut.
Run scripts in the current tab	Fills a login, card or code, reads a login form to save it, or reads the page you clip. Each run follows an action of yours.
Sign-in window	Opens the SaaSy sign-in and approval window.
Storage	Keeps you signed in. A "save this login?" offer waits in memory for up to five minutes.
Alarms	Retries clips that were saved while you were offline, and clears a copied 2FA code on time.
Clipboard	Copies a 2FA code after a fill and clears it 30 seconds later.
Access to hellosaasy.ai	Talks to SaaSy. The extension sends data only to SaaSy.
Access to all websites (optional)	Only asked for when you turn on Use SaaSPass on every site. See below.

The extension clears a copied 2FA code only if the clipboard still holds that code. It reads the clipboard for that check alone, so something you copied since is never wiped.

Use SaaSPass on every site

By default, the extension does nothing on a page until you open the popup or press the shortcut. Some features need to work while you use a site, so they sit behind one opt-in setting in the SaaSPass section of the popup: Use SaaSPass on every site (save logins and passkeys).

When you turn it on, the browser asks you to allow access to all websites. With that access, the extension:

• shows the SaaSPass icon in login fields;
• offers to save a login when you submit a sign-in form;
• answers a site's passkey requests.

Turn the setting off and the browser removes that access again. If you decline the browser's prompt, the setting stays off.

Fill a login

Open a site's sign-in page and use any of these three ways.

From the popup

Select the SaaSy icon. The SaaSPass section lists the logins saved for this site. A login saved for another address on the same site is marked same site.

• Fill puts the username and password into the page's sign-in form. The popup then closes, unless it has a question for you (see Link a login to a company).
• Copy username and Copy password copy to the clipboard instead.

With the keyboard shortcut

Press Ctrl+Shift+L (Cmd+Shift+L on a Mac). The extension fills the best login for the page without opening the popup. Logins saved for this exact address come first. If nothing matches, the shortcut does nothing.

You can change the shortcut in your browser's extension shortcut settings.

From the login field

With Use SaaSPass on every site on, a small SaaSPass icon appears in username and password fields on secure (https) pages. Select it to see the logins for the site, then pick one to fill it. The list shows only names and usernames. The page never receives your passwords through it.

2FA codes

A 2FA item saved for the site shows as 2FA code in the popup.

• Fill code puts the current code into the page's verification-code field.
• Copy code copies it.

After you fill a login, the extension also copies the matching 2FA code for you. It picks the 2FA item with the same username, or the only 2FA item for the site. It clears the clipboard 30 seconds later. To stop this, clear Copy the 2FA code after filling a login (cleared after 30 seconds) in the popup.

Generate a password

The Generate password panel in the SaaSPass section makes a strong password for a sign-up or change-password form.

1. Set Length with the slider, from 12 to 64 characters. It starts at 20.
2. Keep Symbols ticked to include symbols, or clear it.
3. Select Regenerate for a new one, Copy to copy it, or Fill into page to put it into the page's new-password fields.

The password is not saved yet. Save the login once you have submitted the form.

Save or update a login

From the popup. After typing a username and password into a sign-in form, open the popup and select Save login from this page. SaaSPass saves a new login for the site. If you already have a login with that username, it offers Update password for that login instead. Saving works only on secure (https) pages.

When you sign in. With Use SaaSPass on every site on, submitting a sign-in form puts a 1 on the SaaSy icon. Open the popup to see Save login for the site, or Update password for a login whose password changed. Select Save or Update, or Dismiss. The offer expires after five minutes. The extension does not offer to save when the password matches the one you have.

Browse your vault

The Vault section of the popup shows every SaaSPass item you can see, not just the ones for the current site.

• Type in Search vault to find an item.
• Use the type filter to show one type, or All types.
• Items are grouped by type. Select Load more to see more than the first 50.

Each type has its own actions:

Type	Actions
Password	Copy username, Copy password
API key	Copy key
Backup codes	Show codes, then copy each code
Secure note	Copy note
Credit card	Copy number, Copy expiry, Copy CVV
Identity	Copy document number, Copy date of birth
SSH key	Copy private key, Copy public key
TOTP	Copy code
Passkey	None. A passkey is used only to sign in.

The list itself holds no secrets. A secret is fetched only when you copy it, and SaaSy records each reveal in your workspace audit log.

Share an item

Select Share on an item to send it to someone outside your team.

1. Choose Expires after, from 1 hour to 30 days. It starts at 7 days.
2. Tick One-time link to let the link open once, or enter a view limit.
3. Select Create link, then Copy link.

The link is shown once, so send it right away. It is an ordinary SaaSPass share link, so it appears on the Share links page in SaaSy, where you can see its access log or revoke it. Passkeys cannot be shared.

Passkeys

SaaSPass can store your passkeys and sign you in with them. The passkey's private key stays in SaaSy and never enters your browser. Turn on Use SaaSPass on every site first.

Save a passkey. When a site offers to create a passkey, a small SaaSPass window opens and asks Save a passkey for the site. Choose one:

• Continue saves the passkey in SaaSPass.
• Use another device hands the request back to your browser. Use this for a phone, a security key, or the browser's own passkey manager.
• Cancel stops.

Sign in with a passkey. When a site asks for a passkey and you have one saved in SaaSPass, the window shows Sign in to the site. If you have more than one account there, pick one, then select Continue. Use another device falls back to your browser here too.

If you have no SaaSPass passkey for the site, your browser's usual passkey prompt appears. Passkey suggestions that sites show inside the username field are also left to the browser.

The window closes after two minutes without an answer, and the request is cancelled.

Fill a payment card

On a checkout page, the SaaSPass section shows Payment cards with the cards saved in your vault.

• Fill card fills the card number, expiry, security code and cardholder name into the page.
• Copy number, Copy expiry and Copy CVV copy one detail at a time.

Cards are filled only on secure (https) pages.

Why some checkouts can't be filled. Many checkouts collect card details inside a secure payment frame that comes from the payment provider's own site. SaaSPass fills only the page you are on, not frames from another site. On those checkouts, the popup says so. Use the copy buttons and paste each detail instead.

Password health badges

Logins in the popup can carry badges that point out a problem:

Badge	Meaning
Breached	The password appears in a known data breach.
Reused	Another login uses the same password.
Weak	The password is easy to guess.
Old	The password has not changed in over a year.

Select Review to open the full vault health report in SaaSy. The badges are advice only. If SaaSy cannot provide the report, the popup simply shows no badges.

Save a page to your CRM

The Save to SaaSy CRM section turns the contact details a page publishes into a CRM record.

1. Open the page, such as a company's website or a person's profile.
2. Select Capture from this page. The extension reads the page's published details: structured data, social and profile tags, email and phone links, and the title.
3. Under Save as, choose Contact, Company or Lead.
4. Check and edit every field. A contact or lead needs a first name. A company needs a name.
5. Select Save to SaaSy CRM.

Nothing leaves your browser until you save. Before creating a record, SaaSy checks whether it already exists. It matches contacts and leads by email, and companies by domain or website. If there is a match, choose one:

• Open existing opens that record in SaaSy.
• Add to existing fills in only the fields that are blank on that record.
• Save as new anyway creates a new record.

When it is done, the popup links to the record with View in SaaSy.

Link a login to a company

After you fill, save or update a login, the popup checks whether a CRM company owns the site, by the company's domain or website. If one does, it asks Link this login to that company. Select Link, or Not now.

A linked login appears in the Credentials panel on the company's page in SaaSy.

Create an API connector from a site

The SaaSPass section shows Create API connector on a secure (https) page in two cases:

• you have an API key or login saved for the site;
• the page looks like API documentation.

Select it to open Agent Studio in SaaSy with a new connector form. The form is already filled with the site's address and your saved API key or login. An API key is picked first. Check the form and save it there. Nothing is created until you do.

Only the site's address is sent, never the full page address. SaaSy refuses private and internal network addresses.

Clip a page

The Clip this page section saves the page you are reading into SaaSy.

1. Under Save as, choose CRM task, Note on a record, or Document (markdown).
2. For a note, choose a record type (company, contact, deal or project) and search for the record.
3. Edit the Title and add a Note if you like. Any text you selected on the page is included.
4. Select Save to SaaSy.

If you are offline, the clip is queued. The popup shows how many are waiting, and the extension retries every five minutes and each time you open the popup.

Privacy

• Data goes only to SaaSy. The extension sends nothing to anyone else. It has no analytics and loads no remote code.
• Passwords stay out of the page until you fill. Web pages never see your SaaSy session or your vault. The field icon's list shows only names and usernames. A password reaches a page only when you fill it into that page's form.
• Fills are checked against the page. Before filling, the extension asks SaaSy again whether the login belongs to the page the tab shows now. If the tab moved to another site, the fill stops.
• Secrets are revealed on demand. Lists never contain secrets. Each fill or copy fetches the one secret it needs, and SaaSy records it in the audit log.
• Passkey private keys never leave SaaSy. SaaSy signs each passkey sign-in on its servers.
• Pages are read only for a reason. The extension reads a page to fill or save a login, to capture a CRM record, or to clip it. Until you turn on Use SaaSPass on every site, it does this only when you open the popup or press the shortcut.
• Copied 2FA codes don't linger. An automatically copied code is cleared after 30 seconds.
• Health badges carry no secrets. The popup receives only which logins have a problem.

See How secrets are stored for how SaaSPass encrypts your vault.

Troubleshooting

What you see	What it means and what to do
SaaSPass matching is not available yet.	The SaaSy service you are connected to does not offer this feature yet. Contact SaaSy support.
Your plan or role does not include SaaSPass.	Your workspace has no SaaSPass, or your role can't use it. See Why can't I see a feature?.
Sign in to SaaSy again to reveal passwords, then retry.	SaaSy wants a fresh sign-in before showing secrets. Sign in to SaaSy again, then retry.
Too many password reveals. Wait a minute and try again.	You fetched many secrets in a short time. Wait a minute.
You are offline or SaaSy is unreachable.	Check your connection and try again.
SaaSPass works on web pages.	The tab shows a browser page, such as settings or a new tab. Switch to the site's tab.
No saved logins for this site.	Nothing in your vault matches this site. Save the login, or check the item's website address in SaaSy.
No login form found on this page.	The extension found no sign-in fields. It fills only the page itself, not sign-in forms embedded from another site.
This page changed. Open SaaSPass again to fill it.	The tab moved to another address after you opened the popup. Open the popup again.
No verification-code field found on this page.	Use Copy code and paste the code instead.
No new-password field found on this page.	Use Copy in the generator and paste the password instead.
SaaSPass can only save logins from https pages.	SaaSPass saves logins only from secure pages.
That save offer has expired.	Offers last five minutes. Use Save login from this page instead.
No "save this login?" offer appears	Turn on Use SaaSPass on every site. Offers appear only on secure pages, and not when the password matches the saved one.
No SaaSPass icon in login fields	Turn on Use SaaSPass on every site, and reload the page. The icon appears only on secure pages.
That passkey request has expired.	The approval window waited too long. Start the passkey step on the site again.
SaaSPass passkeys need an https page (or http://localhost).	Passkeys work only on secure pages.
The payment frame message on a checkout	The card fields belong to the payment provider. Copy each detail and paste it. See Fill a payment card.
This card was saved in an older format that SaaSPass cannot fill.	Copy the card's details, or open the card in SaaSy and save it again.
The sign-in window shows the SaaSy login page	You were not signed in to SaaSy in this browser. Sign in there and the window continues.