SikurdHelp
Open Sikurd

Chrome extension FAQ

What it does, what it doesn't, privacy.

What does the extension do?

The Sikurd 3CX Autofill extension watches the tabs in your browser profile. When you open any 3CX FQDN that's onboarded in your Sikurd tenant, it auto-fills the admin login form.

You stay signed in at sikurd.com; the extension pulls credentials from your Sikurd session on each load. You never type a 3CX password again.

What does the extension NOT do?

  • It doesn't store credentials locally. Each tab load asks Sikurd live, so revoking the user in Sikurd revokes the autofill too.
  • It doesn't fetch any data beyond credentials for the FQDN currently being loaded.
  • It doesn't see browsing history outside the onboarded FQDNs.
  • It doesn't run on sites that aren't your onboarded 3CX instances.

Browser support

Chrome, Edge, Brave, Arc, and any other Chromium-based browser. Firefox version is on the roadmap.

Where do I install it?

Chrome Web Store: Sikurd 3CX Autofill. There's also an Install extension button at the foot of the Sikurd sidebar, and a step in the onboarding wizard.

Permissions

The extension requests:

  • Access to onboarded 3CX FQDNs only — content scripts run only on host patterns matching your onboarded FQDNs.
  • Cookies / storage on sikurd.com — to read your session.

It does NOT request:

  • "Access all sites".
  • "Read history".

What if I'm logged into multiple Sikurd accounts?

The extension uses the active session on sikurd.com in your current browser profile. Use Chrome profiles to separate tenants — one profile per Sikurd account.

Privacy

Credentials decrypt server-side and travel to the extension over HTTPS, then into the 3CX form. They never touch any other origin. The extension never sends data to Anthropic, Stripe, or anyone other than app.sikurd.com ↔ your onboarded 3CX FQDN.

Disabling

Right-click the extension icon → Manage → toggle off. No effect on your Sikurd account — you just lose autofill, and "Open Console" becomes "open the 3CX login page and type the password yourself."

Source

The extension is closed-source for now. We may open-source it later; in the meantime the manifest + permissions are publicly auditable in the Chrome Web Store listing.