Encrypted login sharing

Share the login.
Keep the control.

Stop pasting passwords into chat. Session Injector fills your logins for your virtual assistants — only on the right site, only during their shift — and you can cut off access in one click.

Free during early access · No credit card

The problem

Passwords end up everywhere.

In chat threads, spreadsheets and notes apps — copied, forwarded and never changed. When a VA leaves, you're not sure what they still have.

Session Injector gives your team one place to get logins, limits when and where they work, and shows you exactly how they were used.

How it works

Three steps, then it just fills.

  1. 01
    Add a login

    Save the login once in your dashboard. The password is encrypted in your browser before it leaves your computer.

  2. 02
    Invite your VA

    Put logins into an access group, set shift hours or an IP range if you want, and get a one-time invite code.

  3. 03
    They click, it fills

    Your VA pastes the code into the Chrome extension. On the right site, one click fills the login. No password in chat.

Control

You decide who, where and when.

Shift hours

Logins only work during the hours you set, in the VA's time zone. Overnight shifts work too.

IP limits

Lock access to an office or a home IP range, so a login can't be used from anywhere else.

One-click revoke

Remove a VA and the extension stops filling immediately. You get a reminder to change the passwords they used.

Access log

See who used which login, when, from what IP, and every attempt that was refused.

Encrypted in your browser

Passwords are encrypted with AES-256 before upload. Our servers only ever store ciphertext.

Access groups

Bundle logins by role — 'Store support' or 'Social media' — and hand a VA exactly what they need.

Straight talk

What it does — and what it doesn't.

We'd rather you trust us than be surprised later.

It does
  • Keep passwords out of chat, email and spreadsheets.
  • Limit logins to the right site, shift hours and IP range.
  • Stop access in one click and log every use.
  • Store passwords encrypted — we can't read them.
It doesn't
  • Stop a determined VA from revealing a password once it's filled into a site.
  • Sign a VA out of a website they're already logged into.
  • Work on every site — some, like Google sign-in, block autofill tools.

For your most sensitive accounts, use the platform's own staff access too.

For assistants

No account. Just a code.

Install the Chrome extension, paste the invite code your client sent you, and their logins fill on the right sites during your shift. Working for more than one client? Add another code.

See how it works for assistants →
Chrome extension — coming soon

Pricing

Free during early access.

Unlimited logins, VAs, access groups, shift and IP limits, and the access log. If paid plans come later, we'll tell you well in advance.

Create your account

FAQ

Questions, answered.

Can my VA see the password?

They never need to be sent it, and the extension doesn't show it. But once a password is filled into a website's login form, a determined person can reveal it there — for example with the site's own 'Show password' toggle. That's true of every autofill tool. For your most sensitive accounts, use the platform's own staff access, and change passwords when a VA leaves.

Which websites does it work with?

Most sites with a normal email-and-password login, including two-step ones where the email and password are on separate screens. Some large sites (such as Google sign-in) actively block tools like this; for Gmail and YouTube, use Google's built-in delegation instead.

Can you read my passwords?

No. Passwords are encrypted in your browser with a key protected by your vault passphrase, which we never receive. That also means we can't recover your passwords if you forget the passphrase.

Does my VA need an account?

No. They install the Chrome extension and paste the invite code you send them. If they work for several clients, they just add another code.

What happens when I revoke a VA?

Their extension stops filling your logins right away. Revoking can't sign them out of a website they're already logged into, so we remind you which passwords to change.

How much does it cost?

Session Injector is free during early access. If we introduce paid plans later, we'll tell you in advance.

Take passwords out of the chat.

Set up your vault, invite your first VA, and see every login they use.

Get started free