Autofill and Anti-Phishing

Duration10 minLevelBeginnerOfferModule Gestionnaire de mots de passe Module Anti-phishingPrerequisitesThe browser extension

Functions related to modules

• Autofill (username, password, TOTP code) requires the Password Manager module.
• Anti-phishing warnings and the blacklist require the Anti-phishing module.

If your organization has not enabled these modules, the extension remains your one-click access to your applications, without these two functions. Still, read the anti-phishing section: knowing how to recognize a fake page is useful everywhere.

Objectives

• I have seen the extension fill in a login form
• I know how to insert a value with the right-click when a field is not detected
• I recognize the anti-phishing warning and know when to close it
• I understand why a site may be completely blocked

0 / 4 objectives achieved — check them off as you go through the lesson.

Why it's useful

On a Friday, Léa receives an email saying "Your inbox will expire." She clicks on the link. Before she types anything, the extension covers the form: this site is not recognized by VaultysHub. She closes the tab and reports the email.

A fake login page often looks exactly like the real one. The extension compares the address to the known applications of your organization: it is not fooled by appearance.

Your turn

1. Autofill. Open an application for which a password is saved. The extension fills in the username, password, and, if applicable, the TOTP code. → Autofill
2. Right-click. If a field is not detected, right-click in it: the VaultysHub menu offers known values for the page. → Filling via right-click
3. Copy a value. In the extension, hover over an application and click on the gear icon. Buttons copy the username, password, or six-digit code. → Password in the extension
4. Recognize warnings. Read the three cases: → Anti-phishing

What you see	Mode	What to do
A window over the form, with Close	Permissive	Check the address. Only close if you are certain the site is legitimate.
A window that cannot be closed	Aggressive	You cannot log in to an unknown site. If the site is legitimate, ask the administrator to add it.
The entire site is blocked	Blacklist	The administrator has banned this site.

tip

The extension only fills in your credentials on known applications. If it does not fill anything on a page that "looks like" your inbox, be cautious.

Check your knowledge

1A login field was not filled. What do you do?

2What forms does anti-phishing block?

3The warning window cannot be closed. Why?

4Which module allows for autofilling credentials?

Key takeaways

• The extension fills in your credentials only on known applications.
• A warning on a login form indicates an unknown site: check before closing.
• A legitimate blocked site? Ask the administrator to add it.

Next lesson: Managing your passwords