Installation

  • Install QuantPass from the Chrome Web Store.
  • Pin the extension to your toolbar for easy access.
  • No account creation is required — your quantum identity is generated locally on your device the first time you use QuantPass on a site.

Getting Started

Registering your first identity

  • Navigate to any site with a login form (e.g. github.com/login).
  • The QuantPass bar will appear at the top of the page in green — "Protect with QuantPass."
  • Type your username into the site's username field.
  • Click the QuantPass bar.
  • QuantPass generates a Dilithium2 (ML-DSA-44) keypair, registers your public key with the QuantPass server, and stores your private key locally on your device.
Registration takes approximately 1–2 seconds. When complete, the bar will show your username and "Quantum verified."

Signing in on subsequent visits

  • Navigate to the login page.
  • The bar shows your registered username and "Quantum verified."
  • Click the bar — QuantPass fetches a challenge from the server, signs it with your local private key, and verifies the signature.
  • If a password is saved for this site, it's automatically filled into the password field.
  • If no password is saved yet, log in manually once — QuantPass will offer to save it.

Generating and saving passwords on signup forms

On sites with a signup form (containing a "new password" field or two password fields), QuantPass automatically shows a password generator bar with a key icon. Click it to fill both password fields with a strong, randomly generated password and save it to your vault.

FIDO2 Hardware Protection

FIDO2 protection adds a hardware verification step (fingerprint, face scan, or security key) before QuantPass uses your quantum identity to sign in. It's optional and per-identity.

Enabling FIDO2

  • Open the QuantPass popup and go to the Vault tab.
  • Find the identity you want to protect and click Enable FIDO2 protection.
  • A new tab opens — follow the browser's passkey/biometric prompt.
  • Once enrolled, the card shows "FIDO2 enabled ✓."

How the unlock gate works

When FIDO2 is enabled for an identity, QuantPass requires a hardware verification step before signing in. A verification tab opens automatically when you click the bar. After successful verification, you won't be prompted again for 15 minutes — subsequent sign-ins within that window proceed without re-verification.

Disabling FIDO2

Open the Vault tab, find the identity, and click Disable FIDO2 ✓. This removes the hardware credential requirement — your quantum identity continues to work normally.

Multi-Account Support

QuantPass supports multiple accounts on the same site. When more than one identity is registered for a domain, the bar shows an "Also saved:" pill row listing other registered usernames. Click a pill to switch accounts.

Managing Your Vault

Open the extension popup and go to the Vault tab to:
  • Authenticate — manually trigger auth for a specific identity.
  • Forget this site — permanently delete the identity and saved password for that site (server-side and local). Use this if you've changed your username or need a fresh registration.
  • Lock & Clear All Identities — removes all local identity data. This does not remove server-side credentials — use "Forget this site" per-site for a full reset.

Troubleshooting

The bar doesn't appear on a site

QuantPass requires a visible password field to attach the bar to. On stepped login forms (where the password field only appears after you submit your username), the bar will appear once the password field is in the DOM. If the bar still doesn't appear, the site may use a custom input element that QuantPass's form detector doesn't recognize — contact support with the site URL.

"Authentication failed" error

This usually means the stored private key no longer matches the public key on the server — typically caused by re-registering locally without clearing the server-side identity first. Fix: open the Vault tab, click "Forget this site," and re-register.

The FIDO2 verification tab doesn't show a biometric prompt

This can happen if no platform authenticator is available on your device (e.g. no fingerprint sensor, Windows Hello not configured). Click "Continue without FIDO2" in the verification tab to proceed using your quantum identity alone, or enroll a physical security key instead.

The password generator bar appeared on a login form

QuantPass detects signup forms by looking for autocomplete="new-password" or two password fields. If a login form has two password fields (unusual but possible), the generator bar may appear instead of the sign-in bar. Use the dismiss button (✕) to close it and reload the page.

Permissions Reference

All websites — Detects login and signup forms on any site you visit. This is the same scope every password manager requires since your accounts span the entire web, not a fixed list of domains.
Storage — Stores your encrypted quantum identity keys and extension settings locally on your device. No credential plaintext is ever stored.
Active tab — Used for popup-initiated actions when you click the extension icon on the current tab.
Alarms — Handles background session housekeeping, compatible with Chrome's MV3 service worker lifecycle which doesn't support long-lived timers.

Technical Architecture

QuantPass uses:
  • ML-DSA-44 (Dilithium2) — NIST FIPS 204 post-quantum digital signatures for authentication
  • ML-KEM-1024 (Kyber) — NIST FIPS 203 post-quantum key encapsulation
  • Zero-knowledge vault — Passwords are encrypted on your device before transmission; the server never sees plaintext
  • Shadow DOM injection — The QuantPass bar is isolated from the host page's CSS and JavaScript, preventing credential harvesting by malicious sites

Contact & Support

Email: support@quantcert.ai
Privacy policy: quantcert.ai/legal/privacy-policy