Skip to content
Secure Quick Reliable Login WebExtension for Firefox and Chrome
JavaScript HTML CSS
Branch: master
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
_locales/en
icons
test
.gitignore
LICENSE
PRIVACY.md Create PRIVACY.md Jun 24, 2019
README.md Update README.md Nov 27, 2019
background.js Use the qry from the previous request Oct 18, 2019
bn.js added source url Jan 29, 2018
content.js
importIdentity.html
importIdentity.js
jQueryLight.js
jsQR.js Preparations for QR code scanning through webcam Apr 1, 2019
manifest.json
popup.html
popup.js
printIdentity.html
printIdentity.js
qrcode-make.js Export identity via QR Code Jun 13, 2019
sodium-asmjs.js Moved ajax to content.js Jul 14, 2018
style.css
utils.js

README.md

SQRL

Secure Quick Reliable Login by Steve Gibson over at https://grc.com/sqrl

This is a WebExtension for Chrome and Firefox that enables logging into SQRL-enabled webservers.

How to use?

Firefox

Install latest release from: https://addons.mozilla.org/en-US/firefox/addon/sqrl/

OR clone or download this WebExtension, then create an xpi file with a command like cd SQRL; zip -r SQRL.xpi * then open FireFox Developer Edition (normal Firefox will not work), go to about:config, search for xpinstall.signatures.required and set it to false, then go to about:addons, Click on the gear icon (⚙) pulldown, click "Install Addon From File..." and open the SQRL.xpi file.

Chrome

Install latest release from: https://chrome.google.com/webstore/detail/sqrl/adfaiodpchglcmalaiifkcclimpffono

OR clone or download this WebExtension, then go to chrome://extensions/, enable "Developer mode" and then "Load unpacked extension...". Point it to the root of the SQRL folder/dir you just created.

TODO's

  • Better error messages on Rescue Code input
  • Remove blocking of cross-origin authentications
  • Add user confirmation of cross-origin authentications, show domain
  • Move identity import to separate tab, not in popup
  • Add identity import by QR code via webcam
  • Font-family on Firefox/Ubuntu is wrong
  • Make non-empty password mandatory
  • Firefox white empty popup: https://bugzilla.mozilla.org/show_bug.cgi?id=1416505
  • Explain import needs Rescue Code, cannot import with Password
  • Explain Settings > Password > Remember
  • Automatic formatting for textual identity input

Feature requests

  • Change name of identity
  • Keep a list of sites where SQRL was used
    • Click a link to open the site and log in to it
    • Panic button which locks all known sites

SQRL feature status

  • cmd
    • query
    • ident
    • disable
    • enable (URS/SUK)
    • remove (URS/SUK)
  • opt
    • Client-Provided Sessions (CPS)
    • sqrlonly
    • hardlock
    • suk
  • tif
    • ID_MATCH (1)
    • PREV_ID_MATCH (2)
    • IP_MATCH (4)
    • SQRL_DISABLED (8)
    • UNSUPPORTED_FUNCTION (16)
    • TRANSIENT_ERROR (32)
    • COMMAND_FAILED (64)
    • CLIENT_FAILURE (128)
    • BAD_ID (256)
    • ID_SUPERCEDED (512)
  • QuickPass
  • ver ≠ 1
  • ask / btn
  • can (Cancellation URL)
  • x (Path extension)
  • Optional additional name=value pair data
  • Alternate IDK
  • Rekeyed identities
    • Rekey an existing identity
    • Work with rekeyed identities in server communication (max 3 PIUKs)
  • Client secrets (SIN/INS/PINS)
  • Change password with old password
  • Change password with Rescue Code
  • Show domain name on cross-origin authentications
  • Export Identity
    • Text
    • QR Code (with Rescue Code)
    • QR Code (with Password)
    • File
      • .sqrl
      • .sqrc
  • Import Identity
    • Text
    • QR Code (with Rescue Code)
    • QR Code (with Password)
    • File
      • .sqrl
      • .sqrc
You can’t perform that action at this time.