Your Bridge to Secure Authentication
The QuantumPass browser extension acts as a secure bridge between your browser and your mobile device, enabling seamless passwordless authentication on any website.
When you visit a supported site, the extension detects the login request. Simply click "Sign In", confirm the notification, and approve the push request on your mobile device with biometrics. No manual scanning required.
Login Required
Tap to authenticate secure-portal.example.com
Key Features
Auto-Fill & Login
Automatically detects login forms and fills credentials securely after mobile authorization. No copy-pasting required.
Smart QR Scanning
Right-click any QR code on a webpage to scan it securely with QuantumPass, protecting you from malicious codes.
Phishing Protection
Verifies the domain authenticity before submitting any credentials, effectively neutralizing phishing attacks.
Real-time Sync
Instantly synchronizes authentication status between your browser and mobile device via secure WebSocket connection.
Privacy First
Zero-knowledge architecture ensures the extension never sees your actual credentials or private keys.
Remote Logout
Forgot to sign out? Terminate any active web session remotely from your mobile app with a single tap.
Installation & Setup
Add to Browser
Download and install the QuantumPass extension from your browser's official web store.
Pair Device
Click the extension icon and scan the displayed QR code using your QuantumPass mobile app to securely pair them.
Authenticate
Navigate to any supported website. The extension will detect the login field and prompt for authorization on your phone.
Chrome Web Store
QuantumPass Extension
Passwordless authentication
Installing...
Installed Successfully!
QuantumPass is now active
Connect Mobile App
Biometric Setup
Touch ID Required
You're All Set!
Technical Specifications
Security Architecture
- Zero-Knowledge Proof: Validates identity without transferring credentials or private keys.
- Device Binding: Uses public-key cryptography to securely bind the browser extension to your mobile device.
- Ephemeral Identifiers: Each authentication request uses a single-use, time-bound token to prevent replay attacks.
- End-to-End Encryption: All communication between extension and mobile app is encrypted using AES-256.
- Manifest V3: Built on the latest secure extension standard with minimal permissions.
Authentication Flow
- Detection: Extension identifies QuantumPass-enabled login fields.
- Initiation: User clicks "Sign In" and confirms the request in the extension popup.
- Challenge: Server issues a unique cryptographic challenge.
- Push Notification: Challenge is sent to the bound mobile device via secure push.
- Verification: User approves via biometrics (FaceID/TouchID), signing the challenge.
- Completion: Signed response is verified, and the browser session is authenticated.