AutoFill

#AutoFill on each platform

The web vault doesn't fill anything.

#Turn it on: Mac

1. Make sure you're signed in to the MimiKey Mac app.
2. Open System Settings > General > AutoFill & Passwords.
3. Turn on MimiKey.

In Safari or another app, choose MimiKey from the system AutoFill suggestions at a login field, then choose an item. The Mac app must be running and unlocked; if it's locked, you're asked to unlock it first. Whether you also confirm in MimiKey depends on the confirmation level below.

If nothing is saved for the current site, click Save to MimiKey (保存到 MimiKey), enter the username and password, and choose Save and fill (保存并填入).

Important During the beta, the macOS system AutoFill extension only runs on registered development Macs. If you installed the beta from the download page, use the browser extension.

#Turn it on: iPhone

1. Sign in to the MimiKey app first.
2. Open Settings > General > AutoFill & Passwords and turn on MimiKey. You can also jump there from System AutoFill (系统自动填充) in MimiKey's settings.

When you choose MimiKey at a login field in Safari or another app:

1. Unlock with Face ID or Touch ID (turn on quick unlock in the app first), or enter your master password.
2. Pick the item to fill from the matching accounts.

Some apps only give iOS a domain name rather than a full https address; MimiKey doesn't show items for those requests yet.

What's available depends on your iOS version:

#Use it in the browser

Once the browser extension is installed, a MimiKey icon appears in login fields. Click it and choose an item to fill. After you sign in, the extension offers to save new logins.

#How matching works

The Mac, iPhone and browser extension use the same rules:

• Only Login items whose website starts with https:// are considered.
• The item's origin — scheme, domain and port — must match the current site exactly. The path and query string don't matter.
• Subdomains aren't included automatically. An item for https://example.com won't appear on https://www.example.com or https://login.example.com.
• Nothing is offered on http sites.

If you sign in to the same account on several subdomains, set the item's website to the address you actually sign in at, or save a separate item for each sign-in address.

The browser extension will also fill a login form embedded in the page from the same site — the same registrable domain, such as login.example.com embedded in www.example.com. Embedded forms from other sites aren't filled.

Passkeys are matched by the website's identifier, which must be the page's domain or one of its parent registrable domains.

Android uses different matching rules; see Android.

#Confirmation levels

Before the browser extension or Mac system AutoFill receives an item, the Mac app checks Preferences > Browser fill > Fill confirmation (偏好设置 > 浏览器填充 > 填充确认):

• Sites you've approved under Balanced are remembered in memory only, and forgotten when MimiKey locks or you sign out.
• Signing in with a passkey follows the fill rule. Creating a passkey asks for extra confirmation only at Strict.
• When you save a new login, clicking Save on the web page's card is your confirmation. At Strict, MimiKey also asks you to confirm.
• The level changes how often you're asked, not which items match.

#Start queries manually

By default, the Mac app listens for browser requests while it's unlocked and stops when it locks. If you select Start queries manually (手动开启查询（不自动监听）) under Preferences > Browser fill, the Mac app only answers a single request after you start it yourself.

#Safety notes

• MimiKey fills fields but never submits forms for you.
• Once filled, your username and password are handed to the website, so check the address bar shows the site you meant to sign in to.
• Exact matching is your first line of defense against filling a password into the wrong site. Don't broaden an item's website just for convenience.