1 Get the ZapQR app on your phone
Your passwords live in the ZapQR app, not in the browser. Install it, open it, and set it up to unlock with Face ID or your fingerprint.
Requires iOS 17.0 or Android 8.0 and later. Free to download.
2 Save the logins you want to fill
The phone matches the code to a saved login by website address, so each login needs the site it belongs to. Tap + in the app to add one, or bring your existing passwords across from another password manager.
No need to do them all up front. If you scan on a site you haven't saved yet, the phone offers Create New Password — enter the username and password (or generate a strong one), tap Fill & Save, and it fills and saves in one go.
A login saved for example.com also fills on its subdomains, like accounts.example.com. It never fills on a different site.
3 Add the ZapQR extension to your browser
On the computer, open the ZapQR listing in the Chrome Web Store and click Add to Chrome. The same listing installs in Microsoft Edge and Brave.
Get ZapQR for Chrome, Edge & BraveThen pin it: click the puzzle-piece icon in the toolbar and the pin next to ZapQR. Clicking the pinned icon opens a short how-to and the Walk-Up Unlock option.
| The extension asks for | Why |
|---|---|
| Read pages on secure (https) sites | To find password fields and place the ZapQR mark. It never runs on plain http pages, because a password should never be filled over an unencrypted connection. |
| relay.zapqr.ai | To create a one-time code and collect the login your phone sends. |
| Storage | Remembers the name of the phone you paired for Walk-Up Unlock. No passwords. |
| Side panel | Walk-Up Unlock runs there so the Bluetooth link stays open. |
4 Scan to fill
- aGo to a sign-in page and click the ZapQR mark beside the password field (it says Fill with ZapQR when you hover). A window opens with a QR code and Ready to scan.
- bOn your phone, open ZapQR and tap the scan button (the camera icon at the top of your vault on iPhone). Point it at the code.
- cYour phone shows Filling password for and the site name.
- One saved login for that site — it's sent straight away.
- Several — tap the one you want.
- None — tap Create New Password, then Fill & Save.
- dThe browser window says Filled and closes. Press the site's own Sign in button.
+ Optional: Walk-Up Unlock over Bluetooth
On your own computer you can skip the scan: the extension talks to your phone directly over Bluetooth.
- Click the ZapQR toolbar icon, then Open Walk-Up Unlock. The side panel opens.
- On your phone, open ZapQR → Settings → Walk-Up Unlock and keep that screen open.
- In the side panel, click Connect to your phone and pick your phone from the list.
- From then on, open a sign-in page and click Fill this page. Approve on your phone.
Needs a computer with Bluetooth and Chrome, Edge or Brave. Keep ZapQR open on your phone while you pair — a phone with the app in the background stops showing its name, so it won't appear in the list.
Troubleshooting
No ZapQR mark beside the password field+
Check the address starts with https:// — the mark never appears on plain http pages. If the site built its sign-in form after the page loaded, reload the page. Make sure ZapQR is switched on at chrome://extensions.
"Connection failed" or "Could not reach the relay"+
The computer can't reach relay.zapqr.ai. Check your internet connection; on a work or school network, a firewall may be blocking it — use Walk-Up Unlock instead, or ask IT to allow the address.
"ZapQR was updated. Reload the page to continue."+
The extension updated while the page was open. Reload the tab and click the mark again.
Phone says "No saved password for this site"+
You have the login saved, but its website doesn't match the page. Open the login in ZapQR and set its website to the address shown on your phone, then scan again. Or use Create New Password to save it for this site.
The phone sent it, but nothing filled+
A login only fills on the site the code was made for. If the page changed to a different address while you were scanning (a redirect to a separate sign-in domain, for example), close the window, click the mark on the page you're on now, and scan again.
"Code expired — getting a new one"+
Codes are single-use and short-lived. A fresh one appears on its own; scan that.
My phone doesn't appear when pairing Walk-Up Unlock+
Keep ZapQR open on Settings → Walk-Up Unlock, with the screen on, while you click Connect to your phone. Check Bluetooth is on for both devices, and that you're using Chrome, Edge or Brave (Safari and Firefox don't support Web Bluetooth).
What stays private
Nothing is stored in the browser. The extension has no copy of your vault. It holds a login only for the moment it takes to fill the field.
Every fill is tied to one site and one tab. The code carries the site's address, and the extension refuses a login meant for any other site.
In transit: scan-to-fill travels over an encrypted (TLS) connection through relay.zapqr.ai, which passes it to your browser and holds it only until it's collected or the code expires. End-to-end encryption for scan-to-fill, so that not even the relay can read it, is being added next. Walk-Up Unlock over Bluetooth is end-to-end encrypted today, with a fresh key for every connection.
Still not filling?
Tell us the site and what you saw on each screen, and we'll sort it out.