One Dashboard.
Every Portal.
Securely access all the websites you use every day. Save a portal once — GST, PAN, CSC, banking, insurance — and open it with one click while the extension fills your login on the official site only.
Free plan · No card required · Works in Chrome and Edge
The problem
Your work lives in portals. Your passwords shouldn’t live on sticky notes.
Dozens of portals, dozens of logins
GST, Income Tax, EPFO, eDistrict, banks, insurers — each with its own URL, username format and password rules.
Passwords on paper and in spreadsheets
Shared notebooks and Excel sheets are the most common way operators keep track — and the easiest to leak.
One portal, many clients
Accountants and CSC operators log into the same portal for different customers all day.
Phishing look-alikes
Fake “gov-login” sites copy real portals. Typing credentials into the wrong one is a costly mistake.
How it works
Save your portal once. Access it securely with one click.
STEP 1
Create your encrypted vault
Choose a master password. Your vault key is generated and encrypted on your device.
STEP 2
Add your portals
Pick from the verified portal directory or add any site. Add as many accounts per portal as you need.
STEP 3
Connect the extension
Approve the extension from your dashboard with a one-time code. No passwords are typed into it from the web.
STEP 4
Click. Verified. Filled.
Click a portal: the official site opens, the extension verifies the domain, and fills your login.
Features
A portal launcher with a security engineer’s brain
Everything you need to get into the right portal, with the right account, in one click.
Client-side encrypted vault
AES-256-GCM with per-item keys and Argon2id key derivation. Our servers store ciphertext only.
Domain-verified autofill
Credentials are bound to their websites inside the encryption. Look-alike and phishing domains never get filled.
Multiple accounts per portal
One GST card, every client’s login. Pick the account and KeyValt fills it.
Authenticator codes
Store TOTP secrets encrypted and fill the current code. SMS OTPs are never read.
Use-only team sharing
Share client profiles so staff can log in without KeyValt ever showing them the password.
Instant search & ⌘K
Search decrypted locally in milliseconds. Open any portal from the keyboard.
Security center
Recovery kit, two-factor sign-in, device management and session control in one place.
Password generator
Cryptographically secure passwords and passphrases, tuned for portals with strict rules.
Security
Designed so our servers can’t read your passwords
Your credentials are encrypted before synchronization and are designed to remain inaccessible to our servers in plaintext. Even KeyValt administrators have no way to view them.
- Master password never sent — sign-in uses a separate derived proof
- Website addresses are encrypted and authenticated with each login
- Recovery kit instead of a server-side “reset” backdoor
- Signed portal configurations that can’t redirect your credentials
- Device approval with one-time codes; revoke any device instantly
- 1Your master passwordStays on device
- 2Argon2id key derivation (on device)
- 3Vault key unwraps item keys
- 4AES-256-GCM encryption
- 5Ciphertext synced to KeyValtServer sees this only
Browser extension
The right login, on the right site — every time.
The KeyValt extension (Manifest V3, Chrome & Edge) asks only for the website permissions you approve, checks every page’s real origin, and refuses to fill anywhere else.
Correct domain
services.gst.gov.in
Filled
Look-alike domain
gst-gov-login.com
Blocked
Embedded domain
gst.gov.in.fake-site.com
Blocked
Subdomain rule
www.gst.gov.in
Asks you first
Use cases
Built for people who live in portals
Personal
Banking, insurance, tax and utilities in one tidy, encrypted dashboard.
Digital service operators
CSC / Jan Seva Kendra and cyber cafés: every government portal and every customer login, one click away.
Accountants
GST, Income Tax and MCA logins for every client — pick the client, KeyValt fills the right account.
Small businesses
Supplier, bank and compliance portals for the business, safely shared with the people who need them.
Teams
Roles, client profiles, use-only access and audit logs. Remove access instantly when someone leaves.
Pricing
Simple plans that grow with your portals
Free
For individuals getting started with a handful of portals.
₹0
forever
- Up to 10 portals
- 2 devices
- Browser autofill
- Encrypted vault
- Password generator
Pro
Most popularFor professionals and operators who live in dozens of portals every day.
₹1,990
/ year
- Unlimited portals
- Multiple accounts per portal
- Up to 10 devices
- Authenticator (TOTP) codes
- Advanced autofill & auto-login
- Encrypted export
Business
For teams: shared client profiles, use-only access and audit trails.
₹2,990
per seat / year
- Everything in Pro
- Organizations & client profiles
- Share access without revealing passwords
- Roles & permissions
- Audit logs
- Priority support
Prices in INR, inclusive of applicable taxes where shown at checkout. Payments are processed by Razorpay. Cancel anytime — your vault is never deleted because of a cancellation.
FAQ
Questions, answered honestly
Can KeyValt see my passwords?
No. Everything in your vault is encrypted on your device before it is synced. Our servers store only ciphertext and have no key that can decrypt it. Administrators and support staff have no way to view your passwords.
What happens if I forget my master password?
We cannot reset it for you — that is what keeps your vault private. Use the recovery kit you generated during setup to set a new master password. Without the master password or recovery key, the vault cannot be recovered by anyone.
Does KeyValt bypass CAPTCHAs or OTPs?
No. KeyValt never bypasses CAPTCHAs, SMS OTPs or other security checks. It fills your saved username, password and (optionally) authenticator-app codes. On portals with a CAPTCHA you complete it and submit yourself.
How does it avoid phishing sites?
Each login is cryptographically bound to the websites you saved it for. The extension checks the real origin reported by the browser and only fills exact matches (or subdomains you explicitly allow). Look-alike domains are blocked and flagged.
Can my staff use a login without seeing the password?
Yes. On the Business plan you can share client profiles with “use only” access: KeyValt apps fill the login but never reveal, copy or export the password. As with any autofill tool, this is an application control rather than a cryptographic guarantee against a determined, technical user — rotate passwords when someone leaves.
Which browsers are supported?
Google Chrome, Microsoft Edge and other Chromium-based browsers (Manifest V3). The web dashboard works in any modern browser.
Where is my data stored?
Encrypted vault data and account information are stored in a managed PostgreSQL database. See the Privacy Policy for details on processors and retention.
Every portal. One click. Zero sticky notes.
Start free with up to 10 portals. Upgrade when you need more accounts, devices and your team.