Security lists the passwords that need changing. In the browser extension, each has a Fix password button, which changes the password on the site itself. In the web vault and the desktop and phone apps, Change password opens the site’s change page instead, and you change it there.
What Fix password does
- Vallkey makes a new password that follows the site’s rules, and saves it in the login as New password, not confirmed yet, before any page sees it.
- It opens the site’s change page in a new tab.
- It fills your current password and the new one, and sends the form with the page’s own button. If the site asks you to sign in first, Vallkey fills the login once and goes back to the change page.
- Vallkey asks Update the saved password? Choose Update once the site has taken the new password. The old one goes to the login’s password history.
If it breaks off
Nothing is lost. The new password stays in the login, marked as not confirmed, where you can copy it and finish by hand. The item’s history keeps every earlier version. Pressing Fix password again makes another new password.
Some pages need you to finish: ones that ask for a one-time code, build their form late, or put it in another site’s frame.
What keeps it safe
- The passwords go only into a page whose address the login matches: never another site, another site’s frame, or a lookalike.
- Only in the tab Vallkey opened, for 15 minutes, and never after the form is sent. Locking Vallkey or closing the tab ends it.
- No page can tell Vallkey the change is done. You confirm it in Vallkey’s own prompt.
When a page is unclear
Where a page’s fields can’t be told apart, Vallkey asks Chrome’s built-in model, on your computer, which field is which. It’s given what the fields say, never what they hold, and nothing is sent anywhere. Other browsers don’t have that model: there, you finish by hand.
Plans
Finding passwords to change, and the link to each change page, are on every plan. Having Vallkey change them for you is in Premium and Families.
Last updated October 4, 2026