Offline-First:Zero accounts. Zero telemetry. Manifest V3 ready.

1-Click Offline Autofill for Your Real Data

Stop retyping personal profiles, work addresses, snippets, and payment cards. Stashfill fills any form, React input, or Shadow DOM in under 100 milliseconds — 100% locally on your device, with zero cloud servers.

Supported Platforms: Chrome & Chromium Mozilla Firefox Microsoft Edge Apple Safari
checkout.example.com/onboarding
Alt+Shift+F

Applicant Profile Registration

Complex dynamic form with React 19 state synchronization

Live Form
5 fields matched & filled in 42ms0 telemetry packets
Stashfill
Stashfill Quick Popup
v1.0.0 • 100% Offline
Active Tab
Active Profile3 Saved
Sarah Connor (Primary)
14 fields
Search & Paste/
email: sarah.connor@...Enter
phone: +1 (555) 019-...Enter
Encrypted Vault: Locked
AES-256
0 bytes
Network Telemetry Sent
< 100ms
Instant Popup Launch
AES-256
PBKDF2 600K Encrypted Vault
EN + বাংলা
Bilingual Heuristic Engine
Interactive Simulator

Test 1-Click Form Filling Right Here

Experience how Stashfill detects field names, matches multilingual synonyms (English & Bangla), and updates React controlled inputs without breaking state.

Select Profile:
Stashfill Heuristic Diagnostics & Event Dispatch LogZero-Network Verification: Passed
>Stashfill Heuristic Matcher ready. 0 telemetry listeners attached.
>Form inputs indexed in memory. Waiting for user action...
Built Differently

Engineered for Extreme Speed & Total Privacy

Unlike cloud-based password managers or dummy text generators, Stashfill is an offline-first powerhouse engineered for real-world form edge cases.

Guaranteed Local Isolation

Zero Network Requests. Zero Telemetry.

Stashfill operates without backend servers, user accounts, or analytics tracking. Our automated CI test suite executes a strict AST and source code grep verification that immediately rejects any build containing fetch(), XMLHttpRequest, or WebSocket.

scripts/check-code-safety.mjs passed: 0 network calls
Exit Code: 0
Framework Compatibility

React & Vue State Reconciliation

Modern frontend frameworks ignore direct DOM value assignments. Stashfill overrides the native input value setter descriptor, syncs React _valueTracker, and dispatches bubbled synthetic events.

✓ React 18/19, Vue v-model, Angular
Cryptographic Hardening

AES-GCM 256-Bit Encrypted Vault

Payment cards and confidential credentials are encrypted locally with PBKDF2-SHA256 (600,000 iterations). Payment fields are never passively suggested—only filled after explicit confirmation dialog with ephemeral CVV.

🛡️ 15-Sec Clipboard Auto-Clear
Multilingual Matching

Native English & Bangla Synonyms

Tested across 65+ form fixture scenarios. Resolves tokens across autocomplete, name, id, placeholder, labels, and aria-attributes with comprehensive synonyms for both English and Bangla (বাংলা).

"নাম" ↔ Full Name | "ইমেইল" ↔ Email
Productivity Boost

Dynamic Snippets & Variables

Define reusable snippets with live template variables like {{date}}, {{time}}, and {{cursor}}. Trigger instantly with quick shortcuts.

;sig → Best regards, Sarah Connor
Sub-100ms Performance

Keyboard-First Quick Search & Paste

Never lift your hands from the keyboard. The popup opens with zero delay, automatically focuses the search input, and indexes 200+ fields in milliseconds. Navigate with arrow keys, press Enter to copy or fill, or press Esc to dismiss.

< 100ms
Popup Render
< 32 KB
Injected Script
Alt+Shift+F
Instant Fill Key
0 Overhead
On Host Pages
DOM Traversal

Shadow DOM & Nested Iframes

Penetrates open Shadow DOM boundaries, nested same-origin iframes, and modern custom elements like web components used in Salesforce and Google Forms.

Recursive shadowRoot Walker
Honest Evaluation

How Stashfill Compares

See why privacy advocates, QA engineers, and everyday users prefer Stashfill over cloud managers, default browser autofill, or dummy fillers.

Feature / Capability
Stashfill★ Recommended
Browser Autofill
(Chrome/Safari)
Cloud Managers
(1Pass/Bitwarden)
FakeFiller
(QA Dummy Only)
100% Offline (Zero Network Telemetry)
Never transmits data to external servers or cloud infrastructure.
No Account or Registration Required
Works instantly without email signup, passwords, or mandatory login.
Real Personal Data Profiles
Stores and populates your verified personal, work, and custom identity fields.
Limited
React 18/19 & Vue v-model State Sync
Overrides value tracker descriptors to notify modern JS frameworks.
Partial
Partial
Shadow DOM & Nested Iframe Traversal
Recursively walks shadow roots to find inputs on complex SaaS portals.
Partial
Partial
AES-GCM 256-Bit Encrypted Vault
Seals sensitive cards and credentials with PBKDF2 (600,000 rounds).
Dynamic Snippet Variables (e.g. {{date}})
Insert reusable templates with live date, time, and cursor expansion.
Bilingual Support (English & Bangla)
Native heuristic synonym dictionary recognizing বাংলা and English tokens.
100% Free & Open Source (MIT)
Auditable code with zero paywalls, tiers, or commercial tracking.
Cryptographic Hardening

Security & Threat Model You Can Trust

We architected Stashfill with zero trust principles: no cloud backends, minimal runtime permissions, and client-side encryption derived directly in your browser.

Vault Encryption Flow (W3C Web Cryptography API)

01

User Passphrase

Vault passphrase entered by user. Never persisted to disk in plaintext.

02

PBKDF2-SHA256

600,000 iterations + 16-byte random cryptographic salt via crypto.subtle.

03

AES-GCM 256-Bit

Authenticated ciphertext with unique 12-byte IV per encryption operation.

04

Local Storage Sealed

Encrypted payload saved in chrome.storage.local. Zero remote transmission.

Strict Least-Privilege Manifest V3 Permissions

Stashfill asks for minimal access required for user-initiated actions.

Read Full Privacy & Threat Model
PermissionClassificationJustification
storageLocal OnlyStores encrypted user profiles and preferences on user's physical disk.
activeTabUser-TriggeredAccesses the current tab strictly upon explicit user click or shortcut invocation.
scriptingOn-DemandInjects the lightweight 32KB autofill runtime when filling is commanded.
contextMenusOptionalEnables right-click shortcuts in input context menus.
Host Permissions (<all_urls>)Not RequestedNEVER requested at installation. No passive background page snooping.
Effortless Workflow

How Stashfill Works in 3 Steps

Say goodbye to typing the same email, address, and credit card number over and over again.

01AES-256 Vault

Stash Your Real Data Once

Enter your personal identity info, work credentials, billing addresses, custom snippets, and encrypted payment cards inside the extension options. Your data stays strictly on your local device.

02Zero Host Permissions

Browse Freely & Privately

Unlike intrusive extensions, Stashfill remains completely dormant. It injects zero content scripts while you browse, listens to zero network events, and tracks zero web history.

03< 50ms Matcher

1-Click or Shortcut Fill

When you land on a form (checkout, job application, tax portal, SaaS onboarding), press Alt+Shift+F or click the popup. All matching fields populate in under 50 milliseconds.

Multi-Browser Architecture

Available for Every Major Browser

Packaged strictly from a single clean, auditable Manifest V3 TypeScript codebase.

🌐

Google Chrome & Chromium

Brave, Vivaldi, Opera, Arc, and all Chromium-based engines.
Manifest V3
Quick Setup:Download zip, unzip, open chrome://extensions, enable Dev Mode, and click "Load unpacked".
🦊

Mozilla Firefox

Firefox Desktop, Developer Edition, and Firefox Nightly.
Manifest V3
Quick Setup:Load temporary add-on via about:debugging#/runtime/this-firefox or install via Firefox Add-ons AMO.
🌊

Microsoft Edge

Windows 11 and macOS Edge with native sidebar integration.
Edge Add-ons
Quick Setup:Available in the Microsoft Edge Add-ons store or load unpacked via edge://extensions.
🧭

Apple Safari (macOS & iOS)

Converted via Apple xcrun safari-web-extension-converter.
macOS & iOS
Quick Setup:Convert Chrome MV3 build using Apple xcrun tool or download Xcode wrapper build from Releases.
Prefer building from source?
Run pnpm install && pnpm build to compile locally in 5 seconds.
Inspect Repository on GitHub →
Got Questions?

Frequently Asked Questions

Everything you need to know about Stashfill's privacy, architecture, and features.

Yes. Stashfill does not have a backend server, account database, or telemetry endpoint. Every build is verified by an automated CI script (scripts/check-code-safety.mjs) that fails if fetch, XMLHttpRequest, WebSocket, eval, or dynamic script injection appears anywhere in production source code. All your data stays strictly in your browser local storage.