Is FormsPilot safe?

FormsPilot asks you to save sensitive details: your Aadhaar number, bank account and signature. Here is exactly where they’re kept, what the extension can and can’t do, and how to check it yourself.

Where your details are kept

• Profiles and settings are in the browser’s storage for extensions. Documents (photos, signatures, scans and PDFs) are in FormsPilot’s own database inside the browser. Both stay on your computer, in the browser profile where you installed FormsPilot, and websites can’t read either.
• Nothing is sent to us or anyone else. We don’t have a copy of your details, so we can’t see, lose or leak them.
• A backup (Export) is a file you save yourself. With the passphrase lock on, the backup is encrypted with your passphrase too.

The passphrase lock

• The lock is optional. When it’s on, every profile and document is encrypted with AES-256-GCM, using a key made from your passphrase with PBKDF2-SHA-256 (310,000 rounds, random salt).
• While FormsPilot is unlocked, the key is kept in the browser’s session storage: in memory only, never written to disk, and out of reach of web pages.
• FormsPilot locks itself after the idle time you choose (15 minutes unless you change it), so someone else using your computer can’t read your details.
• If you forget the passphrase, the encrypted details can’t be recovered, by you or by us. There is no back door.

Why Chrome says “Read and change all your data on all websites”

Chrome shows this warning for every extension that works on any website. FormsPilot needs that because forms can be anywhere: a state scholarship portal, a university’s own site, a job site, often inside frames. On a page with a form, FormsPilot reads the form’s labels and field names to know what goes where, and writes your details into the fields when you click Fill. It doesn’t send page content anywhere, and it never presses submit.

Safari asks the same question its own way: you can allow FormsPilot on every website, or only on the ones you choose.

Every permission, and why

• All websites (content scripts): to find and fill forms on any site, including inside frames. On formspilot.in only, FormsPilot also tells the page a random installation ID and whether Pro is on, so a license can be issued.
• Storage: to keep your profiles and settings, and the unlocked key while you’re using FormsPilot.
• Unlimited storage: documents can be bigger than a browser’s default allowance.
• Active tab and scripting: so the toolbar button, keyboard shortcut and right-click menu work on the tab you’re on, including tabs that were open before you installed FormsPilot.
• Context menus: right-click → Fill this form and Undo last fill.
• Offscreen (Chrome only): to process photos, scans and PDFs in a hidden page inside the extension, on your computer.

What FormsPilot never does

• Press submit, or fill logins, OTPs or CAPTCHAs.
• Save or fill passwords or card numbers.
• Make network requests, load code from the internet, show ads, or run analytics or tracking.

Check it yourself

You don’t have to take our word for “no network requests”. In Chrome:

1. Open chrome://extensions and turn on Developer mode (top right).
2. On FormsPilot’s card, next to Inspect views, click service worker. A DevTools window opens. Choose its Network tab.
3. Fill a form and attach a document with FormsPilot as usual. If an offscreen.html view appears on the card while a document is being processed, inspect that one too.
4. Look at the list: every entry is a chrome-extension:// file from FormsPilot’s own package. Nothing goes to a website.

What this website sees

formspilot.in is separate from the extension. When you buy Pro, it takes your email for the receipt and license, and passes your mobile number to Cashfree for the payment. It never receives your profiles or documents. Details are in the privacy policy.

Found a security problem?

Email support@formspilot.in with “Security” in the subject. We’ll reply within 2 working days.