Passwords, Addresses and Cards
Saving a sign-in
Sign in on a site as usual. The key in the address bar lights up and offers to keep the username and password. The first time, it asks you to choose a primary password, which locks everything you save from then on.
Nobody can recover a forgotten primary password, including Methodox. Choose one you will remember, or write it down somewhere safe.
Filling a form
Next time you visit, click the username or password field. Your saved sign-ins for that site are listed under it; choose one and the form is filled.
- The browser fills a form only when you choose something from that list. It never fills on its own.
- A password is offered only on the site it was saved for.
- On a field for a new password, the list offers a strong generated one.
Addresses and cards work the same way: fill in a delivery or payment form once, accept the offer to keep it, and the next form offers it from its name or number field. A card's security code is never saved.
The Passwords page
Open it from the … menu. It lists sign-ins, addresses and cards, each in its own view.
- Search, show, copy, edit and delete any entry.
- Notes: a sign-in's editor has a Notes field, for recovery codes or security answers. Notes are shown only when you open the entry, like the password.
- Import a CSV file exported from another browser.
- Never save lists the sites you told the browser not to offer for.
When the vault locks
The primary password unlocks the vault once, and it stays open until one of these, chosen in the Passwords page's settings:
| Setting | Locks when |
|---|---|
| When Windows locks (default) | Windows locks or the computer sleeps |
| After 15 minutes / an hour | The vault has gone unused that long |
| When the browser closes | Only then |
It always locks when the browser closes.
The vault file
Everything is kept in one file, passwords.kdbx, in your profile folder (%LOCALAPPDATA%\Methodox\Lightning). It is a standard KeePass file.
- KeePassXC and KeePass open it with your primary password, and can edit it. Changes made there are picked up by the browser.
- Back it up or sync it like any other file.
- It is not tied to your Windows account. Someone who knows your Windows PIN cannot read your passwords without the primary password.
What it does not protect against
No password store can stop a malicious program that is already running under your account while the vault is unlocked, or one that records your keystrokes. Locking when Windows locks keeps that window short.
Forms it cannot fill
Sign-in forms inside a frame from a different site, and forms some sites build in a way the browser cannot see into, are not offered saved sign-ins.