Hi CCPLInd,

Thank you for your review and for choosing TransferChain specifically for its security. That’s exactly what we are built for.

First of all, you are absolutely right. When a password is filled on a login page, the browser (Chrome, Edge, etc.) may show its own “Save password?” prompt. This popup is generated entirely by the browser, not by TransferChain. Every password manager has to deal with this behaviour, and most of them do not block it at all.

We have just implemented a new upgrade in our browser extension that will:
disable the browser’s built-in “save password” prompts and instead show TransferChain’s own prompt apply this improvement not only in Chrome, but across all major browsers
This change will be included in our next extension release, so your users will no longer see the browser’s save-password popup during login. It is also important to highlight that this is a user-facing security layer, not a protocol-level security mechanism.

How your passwords are actually protected at TransferChain. Regardless of the browser prompt, your passwords are protected at all times by our patent-pending protocol:

Client-side and end-to-end encryption:
Your passwords are end-to-end encrypted (and split into fragments) on your device before they ever touch the internet.

Data fragmentation and distributed storage:
Encrypted data is split into fragments and stored across multiple storage locations in a distributed manner. No single provider, ever holds all of the chunks together.

Blockchain-based authorization:
Every time you save or access your passwords you're authorized through the blockchain network, preventing unauthorized access and providing an immutable system.

Because of this design, no one can access your passwords unless you grant them the rights. This includes our engineers, our servers, or any storage providers. For example, all traditional password managers store and keep password hashes, but in TransferChain your password is first encrypted end-to-end on your device and then fragmented into small chunks. As a result, there is no trace of a full hash stored anywhere. In other words, yes, with TransferChain you benefit from the highest protocol-level security.

At the same time, we know that backend security alone is not enough. Just as you pointed out, we continuously improve the user-facing side as well, and disabling the browser’s password saving prompt is one of these improvements.

We really appreciate your attention to detail, your focus on security.

Kind Regards,