Everything you fill out, in one private place.

BoxOwl is a personal data vault — passwords, identity, payments, profiles — with universal autofill, a public profile you control, and per-field privacy. One source of truth.

The vault

One vault. Every kind of thing you'd rather not retype.

Passwords were just the start. BoxOwl holds the rest of your digital identity too.

🔒 Logins Per-site, generated, autofilled, with breach alerts.
Authenticator TOTP codes built in, alongside the account they protect.
Identity Name, birth date, citizenship, photo, pronouns.
Addresses Tag by relationship — self, household, family, friend, colleague, gift recipient, one-time. Batch-add holiday shipping for the season and auto-revoke when it's over.
🔒 Payment Methods End-to-end encrypted cards. We can't read them. Bound to addresses you recognize — merchants confirm without seeing them. Shared cards just work.
Emails Primaries, per-purpose, all in one place.
Phones E.164 formatted, with primary flags.
Work History Roles, dates, exports as resume or JSON.
🔒 Secure Notes E2EE notes for licenses, recovery keys, anything sensitive.
Personal Links Personal links page — one shareable URL for everything.
Preferences Sizes, dietary, style, anything you'd repeat at checkout.
Vehicles VIN, plate, insurance, registration.
Documents License, passport, IDs — securely attached.
Travel Documents KTN, redress, visas — expiry tracked.
Loyalty Programs Account numbers, tiers, perks — masked at rest.
Pets Name, breed, vet — with photo.
Universal autofill

Forms ask for everything. You fill them once.

The browser extension reads the form, asks you, and fills it. You stay in control — per field.

01 / Detect

BoxOwl sees the form

The extension reads the field labels, types, and context. Even on single-page apps and dynamically rendered forms.

Name
Email
ZIP
Detected · 9 fields
02 / Match

You pick which values

Field-level pickers: which address is this — home, work, billing? Defaults are smart; the choice is yours.

Address
Home Work Ship
03 / Fill

One tap to fill the rest

All matched fields populate, with a subtle highlight as confirmation. Wrong field? Edit inline. Nothing leaves your device that you didn't approve.

Name
Email
ZIP
Filled · 2.1s
Public profile

Your page at boxowl.me/u/{handle}.

One link that holds your bio, contact, and the things you choose to show. Style it your way, share via QR.

Per-field privacy

Private. Public. Or shared.

Every field has its own visibility. Revoke anytime. Export, or delete the vault entirely.

Name Kira James Public
Handle @kira Public
Email kira@example.com Shared with 3
Home address 248 Sumac Ave, Portland OR Private
Card · primary •••• 4242 Private · E2EE
Birth date 1992-03-14 Private
Sync, offline, portable

Your data, always with you.

Encrypted local cache means BoxOwl works on the train. Full JSON export, anytime. Deletion is one tap.

Offline sync

SQLCipher-encrypted local cache. Delta sync only changed fields. Last-write-wins on conflict.

Full JSON export

Your data, in a portable, structured format. Drop it anywhere; we don't lock you in.

One-tap deletion

Erase the entire vault and any connected org grants. CCPA & GDPR delete obligations satisfied.

did:web identity

A portable, cryptographic identity at did:web:boxowl.me:you. Resolvable, verifiable, yours.

For builders

Building an app that asks customers for their data?

BoxOwl offers two ways to integrate — SMRT for lightweight identity, PDaaS as a full data layer.

PDaaS · vault as a service SMRT · identity headers

Set up your vault once. Use it forever.

BoxOwl is in private beta. Join the waitlist to receive a registration token.

Join the private beta See pricing