| General | Who, where, what, how much...? |
| Interface | The user interface such as the overlay. |
| Managing Data | Your persona data and passwords. |
| Form Fill | Filling profile and registration forms. |
| Disposable Email | Generating and using special purpose email addresses. |
| Passwords | Auto filling login forms. |
| Training | Training Sxipper to work with forms. |
| OpenID | Single sign on with OpenID |
| Security | How Sxipper secures your data |
| Privacy | Sxipper's privacy policy. |
| Roadmap | What Sxipper will be doing in the future. |
Sxipper is a free Firefox extension that saves you time on the web, enabling you to easily control the release and management of your identity data. With a single click, Sxipper is trained to securely log you in with a username or an Identity 2.0 authentication mechanism such as OpenID.
Sxipper is free, and will always be free. See our End User License Agreement. In the future we will offer a commercial set of services that integrate with Sxipper, see "What is Sxipper Pro?".
You must have at a minimum Firefox 1.5. We recommend Firefox 3.
Sxipper's public releases are distributed through the Mozilla approved add-ons site. For the more adventurous, who want to stay close to the bleeding edge of Sxipper development, we make development releases available directly from the Sxipper site.
OpenID is a new way for you to login into websites. OpenID is a user-centric, Identity 2.0 protocol for exchanging identity data. See the OpenID FAQ for more info.
Sxipper PRO is an upcoming commercial set of services that integrate with Sxipper.
Sxipper PRO service is indicated by the
icon. The Disposable Email Service, currently in beta, will be part of Sxipper PRO. While in beta, Sxipper PRO services are made available free of charge.
Give us your suggestion with the Feedback buttons located in Sxipper or the Feedback link in the the status bar Sxipper menu.
To uninstall Sxipper go to your Firefox menu and choose Tools | Add-ons (or Tools | Extensions in Firefox 1.5). Select Sxipper from the list of extensions and click the "Uninstall" button. After restarting your browser Sxipper will be removed.
Sxip Inc, the market leader in Identity 2.0, an internet-scale approach to identity and access management that is simple, secure and open.
Valued for their intelligence and obedience, dogs are easily trained and are loyal companions, just like Sxipper!
This feature is not available at this time, but will be in the future.
| Login Overlay | Form Fill Overlay | |
|---|---|---|
| 'esc' closes overlay and all Sxipper icons and triggers | ||
| 'up' / 'down' highlights usernames /OpenIDs | ||
| 'enter', 'return' or 'space' selects and fills information | ||
| 'delete' prompts you for deleting a highlighted login name | ||
| any character closes the overlay | ||
| a unique set of characters will highlight the matching login name |
On any overlay, pressing 'esc' will close the overlay and any associated icon in the form entirely, including single mouse click triggers. (To re-open the overlay use context menu - right mouse click on a form field and select 'Form fill', 'Field fill' or 'Login' depending on the form).
On a login overlay usernames / OpenIDs can be highlighted (marked) using either 'up' / 'down' keys or by typing in parts of the login name until it uniquely identifies it. Pressing 'enter', 'return' or 'space' key will select the login and fill the information into the form as well as submitting the form when the latter option was enabled on the overlay. Pressing the 'delete' key will prompt you for deleting the highlighted login name.
On any overlay other than login overlay, typing a character will close the overaly and will resume to editing the form field.
The form fill overlay, which appears when clicking on Sxipper in form that needs to be filled, can be dismissed in two ways.
A login overlay can be dismissed by selecting the 'hide' link on the overlay. See "How do I stop Sxipper from appearing on logins I don't want help with".
The Sxipper status bar icon indicates if Sxipper is enabled. Right-click on it to access preferences or our New-User Help/Welcome page, send feedback, or disable Sxipper.
Yes, click on the horizontal lines along the top of the login overlay to drag the window wherever you want. The overlay position is remembered for the next time you visit that site.
Click "Hide" in the top right corner of the Sxipper overlay. To get Sxipper to appear again, refresh the page, click in a field and choose "Auto-show".
Login options are presented with the one that has worked in the past visible. Other options are hidden but available through clicking on the blue bar.
Sxipper tracks the last login (username & password or OpenID) and number of times each was used with each site. This information is stored as metadata for each login that can be viewed as a tooltip when you hover it. The metadata also includes Sxipper's attempt at tracking whether or not past attempts with each combination was successful or now.
Since Sxipper no longer requires a username and password, your username will not appear in the status bar like it used to. If you train forms and use a training name to get credit, it will appear in the status bar.
Personas are sets of personal information that present different views of your identity to web sites. For example, you may choose to use your "public" persona when commenting on a blog, your "home" persona when purchasing a gift to be delivered to your house, and your "professional" persona when registering for a conference. These views can differ in what address, email, phone number, etc. is filled, making it much easier to present the relevant data when requested.
From the Form Fill tab in Preferences, click on Edit under Persona Data. Edit each persona page to create views of your identity, and edit the associated icon and label to make them recognizable. You can create up to four personas.
Not directly yet. To correct a card data set fill it into a form, make whatever changes you need to, and save it as a new card. Then simply delete the incorrect card.
Sxipper stores all your personal data securely on your computer's hard disk. For more details read FAQ Security. See Preferences for viewing, importing and exporting this information.
After installing Sxipper some of your personal data can be imported from a vCard, OS X, from your Address Book, and from other online sources such as Plaxo. Otherwise you can enter edit persona data - see the Form Fill tab in Preferences.
Sxipper.com only stores anonymous usage data and any personal data required to deliver services such as Disposable Email Service. More details on this topic are available in FAQ Privacy.
Through Sxipper Preferences click the Backup button on the General tab (Tools -> Sxipper -> Preferences -> General). Note that you will be able to choose the types of data to export and if you are using Firefox 3 you will also have the choice of saving to a zip folder or not. Since your data will be exported in plain text, we recommend you take steps to protect it.
Begin by saving a file of your RoboForm identities.
To do this, choose "Print List..." in the "Identities" menu of RoboForm (RoboForm -> Identities -> Print List...) and
store the file on your computer by clicking "Save".
Go back to Firefox and locate the Form Fill tab on Sxipper Preferences (Tools -> Sxipper -> Preferences -> Form Fill).
Click "RoboForm Identities" and select the file you initially saved.
Currently, Sxipper supports files generated by RoboForm English version.
If you need to change the language of RoboForm go to the "General" section of "Options" menu.
See also How do I import RoboForm Passcards?
While we are working to provide you with a simple synchronization feature in the future, here are a couple of ways you do it now.
Note: The Sxipper account containing trainer name and enabling disposable emails is stored with the passwords.
This can happen if you haven't defined a "My Card" in your OSX Address Book. To do this, select your address book entry. Then select "Make This My Card" from the "Card" menu. Try importing again using the "Fetch more" option on the Form Fill tab in Sxipper Preferences (Tools -> Sxipper -> Preferences -> FormFill). If that still doesn't work, export your address book entry as a vCard and import using the "vCard" option on the Form Fill tab (Tools -> Sxipper -> Preferences -> FormFill).
When the multiple blue Sxipper logos are shown on the left of the form fields, click in any text field to fill the whole form. When the single Sxipper logo is shown on the right of the form fields, click in the desired field to change individual field values.
You may have dismissed Sxipper by clicking outside the overlay. If so, refreshing the page should show the logos. On the other hand, Sxipper will not show up on forms it does not recognize as forms, where a form does not look like it contains identity data, or if Sxipper has not yet been trained for the form. To train Sxipper see "How do I train Sxipper for a form?" as well as What sites and forms are supported?
These appear in form text fields Sxipper can fill. Click in any field showing the logo to call Sxipper.
The grey dog means Sxipper can fill in the field, but does not have the data. If you fill in the field, Sxipper will remember the data the next time you need it.
See also How does Sxipper work for logins?
This shows Sxipper has filled the form. You can now use field fill to change individual field values in any of the blue fields.
Form fill enters all the data at once. Field fill enters data one field at a time.
Multi-field fill enables you to change blocks of related information, such as an entire address, with a single click. Multi-field fill currently works on address and credit card information.
Once you have filled a form and wish to, for example, change the address, simply click in any address field, and you will be offered all available choices of address blocks. Subsequent clicks in the same field will cycle between multi-field fill and field fill.
When credit card information information is entered into a form, Sxipper will offer to remember it. In the credit card dialog you can add in any missing information and give that data set an easy to remember name, such as "Work office supplies card".
Image fill enables you to fill pictures into forms, such as adding a profile picture to a social networking site.
Image fill works by remembering images you upload, so you can visually select and upload them with a single click. To get Sxipper to remember a picture, simply upload an image the usual way. Clicking in the path field will now display the Sxipper image fill overlay showing the image you just uploaded.
Tell us about it! Use the Feedback button or link in the the status bar Sxipper menu to tell us when you see an issue.
Note: The Sxipper account containing trainer name and enabling disposable emails is stored with the passwords.
A disposable email is an email address you can give out instead of your real email address. They can be created conveniently as needed, and you can enable and disable them whenever you like. All email sent to disposable email addresses is forwarded to your choice of real email address, unless disabled.
Go to the Disposable Email section on the Form Fill tab in Preferences, and enter the email address you would like emails received by the disposable email forwarded to - then click "Verify". To verify additional email addresses enter another one in this field and click "Verify".
You can use field fill to select a disposable email address, after you have filled the form. Alternatively, you can configure a persona to always enter a disposable email address. The option for a disposable email looks like this: disposable->you@yourprovider.com, where you@yourprovider.com is a verified real email address.
After you choose to use a disposable email Sxipper will substitute an email that looks something like abljxi7luv@sxipper.net and use that to fill the field in the form. Sxipper will remember you used this email when you return to this site in the future.
Forever, even the free ones you create during the beta. You can enable or disable them at any point.
Every email message forwarded through a disposable email address has a link at the bottom to disable that disposable email address. A notification email will be sent, it contains a link to re-enable it.
Click on the link at the end of a forwarded message or the link in a notification email.
If you remove the email address that your disposable email addresses forward to, then the disposable emails will disappear from view. To see them again, add the original email address to an email address field in one of your personas. The disposable emails will now reappear.
Sxipper can take a look at the passwords you have stored in Firefox to see what other online resources (such as Plaxo) it can retrieve some of your personal information from, saving you from entering it by hand.
Sxipper does not require an account if you are using it for password management and form filling. If you are using the Disposable Email Service, we will maintain an account that contains your disposable email configuration. And if you train forms, a profile will be maintained if you decide you want one.
Grey Sxipper logos on the right of login fields indicate Sxipper knows how to login to the site, but the username and password have not yet been remembered. Enter and submit your login, and allow Sxipper to remember them when prompted. The next time you visit this site Sxipper will help you login.
Yes, HTTP authenticated logins are remembered and presented in a Sxipper login overlay.
There could be two reasons for this. Your Firefox password manager needs to be enabled, Firefox I Tools I Sxipper I Preferences I Security I Passwords I check " Remember passwords" - and the site you are logging in to may be on your Site Exception list. Click the Site Exception button on the Login tab in Sxipper Preferences.
When completing registration forms, Sxipper defaults to generating strong passwords for you (a good thing!). However for some sites you may wish to create your own, easy-to-remember, password. You add memorable passwords by invoking field fill for the password field in a form.
By clicking "Open Personas" when filling a form with a password, you can edit the default password so it always fills with a Random password or one of your Memorable passwords.
To delete a login click the "x" beside the login in the Sxipper overlay. This will remove the login from the overlay and mark it as {deleted} in the password store. To permanently delete a login use the Firefox Password Manager: Firefox menu | Tools | Sxipper | Preferences | Security | Passwords | click "Show Passwords..." Highlight the login you want to delete and click "Remove".
Delete the incorrect login (see FAQ: "How do I delete login/password entry?"), then enter and save the correct one.
Yes you can view your passwords through the "Show Passwords" button on the Login tab in Preferences.
Yes, create a backup file of your passwords through the "Export" button on the Login tab in Preferences. This file could be edited and then imported as well.
Yes, first you create a file of all your passwords through "Export" button on the Login tab in Preferences, load the file onto the other computer that is running Sxipper and then import it.
Begin by saving a file of your RoboForm passcards by choosing "Print List..." in the "Logins" Menu of RoboForm (RoboForm -> Logins -> Print List...). Check 'Full Url' and store the file on your computer by clicking "Save". Go back to Firefox and locate the Login tab on Sxipper Preferences (Tools -> Sxipper -> Preferences -> Login). Click "Import Roboform Passcards" and select the file you initially saved.
See also How do I import RoboForm Identities?
The next time you log in to a site, use the new password. This information will automatically be updated.
After manually logging in to a site, you should be prompted with a question about Sxipper remembering this new information. If you don't see this prompt, check the following:
In rare cases, the site is not supported by Sxipper yet. See also 'what forms are supported'.
Training is when users teach Sxipper how to work with forms so they and others can use Sxipper to fill the fields with their personal data.
Sxipper understands the majority of login forms automatically, but more complex registration and profile forms may need some training. Unlike other tools that guess how to fill forms, Sxipper fills them accurately because the training enables Sxipper to capture the semantics of each form. This allows Sxipper to remember what information each field is asking for in every form it is trained for.
Users like you! Try it next time you come across a form that Sxipper does not understand. By default the creator of a map is anonymous. If you would like other users to know which maps you have created, you may select a Sxipper trainer name that will be associated with any map you create and you would like credit for.
You will be helping the Sxipper users that follow have a safer, easier experience when filling out forms. And if you choose to get credit for training Sxipper, you can set up a trainer name and a profile that others can view.
Select "Get trainer name" on the General tab in Sxipper Preferences (Tools -> Sxipper -> Preferences -> General) and follow the instructions in the dialog. Select "Choose trainer name" and enter your preferred training name when the text field appears. Optionally, you can provide an email address to recover the trainer name in the future.
First make sure you have set a recovery email address for the trainer name on the General tab in Sxipper Preferences (Tools -> Sxipper -> Preferences -> General) on your other computer.
To retrieve the trainer name select "Get trainer name" in Sxipper Preferences and select "Retrieve existing trainer name" in the dialog. Or if you have already set a trainer name and want to overwrite it, select 'retrieve' in the Trainer name section in Sxipper Preferences. After entering the trainer name to retrieve you will be prompted for the retrieval code. The code will be sent to you by email to the recovery email address set previously.
You can disable your trainer name for all forms trained by you by 'renaiming' your trainer name to be an empty string (i.e. delete all characters and click OK) on the General tab in Sxipper Preferences (Tools -> Sxipper -> Preferences -> General).
To not show the trainer name for a particular form only, go to the form, right-click in a field, and choose "Re-train this form". In the training dialog click "Show Advanced Options". Check "Train Anonymously" and close the dialog. Your trainer name will no longer be shown.
When you encounter a form Sxipper doesn't yet understand, right-click in a text field and choose "Train this form". Use the training dialog to match the form fields with Sxipper fields, and set appropriate options for this form. A field highlight shows you which field you are linking to the Sxipper property types.
Usually Sxipper still understands the form somewhat, and it should be easy to re-train Sxipper. However, if significant changes are required, the re-trainer is shown as the trainer.
You need to re-train Sxipper. Right-click in a text field and choose "Re-train this form", or by clicking the "Re-train" button in the persona dialog. Use the training dialog to make the necessary changes. Note: if your skill level is lower than the previous editor, you won't be able to re-train, so use the Feedback button found throughout Sxipper to let us know, and we'll be happy to fix it.
If you choose a trainer name, you can get credit for forms you train via the training dialog (note: each form can be trained anonymously by choosing this option in the training dialog). You will not get credit if you allow Sxipper to automatically train forms as you browse the Web. If someone has a skill level higher than yours and re-trains a form, the credit for training that form will transfer to them.
Skill levels represent how much training you have done relative to other Sxipper users. The levels, seen below, are based on the number of forms that are credited to each trainer.
You must have a skill level equal to or higher than the skill level of the previous trainer to be able to re-train Sxipper. If you don't have sufficient skill to edit the training for a form, you can make the change and it will be available to you locally. The changes will be queued awaiting consensus before they will be published to everyone.
Your profile page can be accessed by clicking on your trainer name in any Sxipper overlay, or by going to http://<trainer name>.sxipper.com. Your skill level is displayed on this page and you can share other information about yourself if you wish.
The different form types are:
| Registration | For registration and signup forms. |
|---|---|
| Profile | For editing identity data on websites where you already have an account. |
| One Click | For forms where only one identity attribute is asked for, Eg. email, phone, postal code |
| Login | For forms where you login with an existing account. |
| OpenID | For forms where you enter just your OpenID identifier. |
| --Ignore-- | For forms that do not contain any identity data, eg. search boxes and forms with fields that are all site-specific. |
| Form Field Name | The values in this column are the names that the web page's author has given to the form's fields. It's a guide to which field is under consideration. |
|---|---|
| Required | A checkbox in this column should be checked if the form cannot be submitted successfully without this field. |
| Sxipper Property Type | The dropdown in the left column sets the higher level category type. The dropdown in the right column sets the specific field name that the form field will be linked to. |
If you can't find the appropriate property type for a field but the field contains identity data that should be understood by Sxipper please choose "Not Trainable > New Type Req'd".
Use Address as the default. You will only need to use "Address (Home)", "Address (Work)" or "Address (Billing)" when there is more than one address requested in a form. If that is the case use the address group most appropriate for the purpose indicated.
| Train Anonymously | If you do not want your Sxipper trainer name to be displayed as the trainer for a site, check this box. |
|---|---|
| Automatically Submit Form | This option allows the mapper to specify that after Sxipper fills the form, it should be automatically submitted. |
| Show Overlay | This option allows the trainer to specify if an overlay should be displayed. If "Show Overlay" is not checked, Sxipper will insert little Sxipper icons into the form's fields so that users know that Sxipper can handle the form for them. |
| Fieldname Used for Login | On registration forms, this lets the trainer manually specify which field will be used as the trainer name for logging in. |
Sxipper is able to work with most html forms on the internet but there are a few exceptions:
Sites that ask for more than one username or have other irregularities may not be fully supported.
OpenID is a decentralized, user-centric identity protocol that allows Internet users to authenticate and exchange identity attributes with any OpenID-enabled website. (It's a new way to log into web sites)
You can get more information on OpenID at OpenID.net and the OpenID section on Wikipedia.
Sxipper remembers your OpenIDs and presents an overlay. You choose the one you want to use and login with one click. Sxipper also helps protect you against phishing.
Sxipper monitors protocol flow and if it detects unusual redirection from the site you are trying to log into, you will get a phishing attempt warning. This will give you a chance to assess the threat before proceeding or canceling.
Your profile data is stored in your Firefox profile directory and is encrypted with a key that is stored with your passwords. Future versions of Sxipper will provide other options on where your profile data is stored.
Your passwords are stored in the Firefox Password Manager. To improve your security we recommend that you use a master password. Future versions of Sxipper will provide other options on where your passwords are stored.
Go to your Firefox preferences, select the Security pane, check the box next to "Use a master password".
A dialog will appear that will guide you in setting a strong password. When your master password is set, Sxipper will prompt you for it when you first start your browser and if want to view your passwords in the Firefox Password Manager.
Sxipper gives you a consistent trusted user experience across all web forms. Sxipper will let you know if you have a username and password or not for a given website. If you get to a website you log into regularly and Sxipper does not present you with your username(s) then you should examine if you are really at the website you think you are. In addition Sxipper itself protects itself from being imitated by phishers because your personalized choice of icon is something that phishers cannot know. Therefore, if you see something that looks like Sxipper but it's displaying a different icon than the one you chose, you should examine whether you are really using Sxipper.
Unlike other so called privacy policies that state what will be done with your data, Sxipper's mission is to give you control over your data and protect your privacy. For details specifics, see the Sxipper Privacy Policy.
All of your usernames, passwords and persona data is encrypted and stored locally on your computer. It is never shared with the sxipper.com servers without your explicit permission.
Sxipper.com will have your email address if you provided one to retrieve your trainer name or if you verified an email address for use with the Disposable Email Service. We will never share, loan or sell your email address. If you provide information on your trainer profile page, then that information is publicly available and on sxipper.com servers. The only other potentially personally identifying information are random cookies that Sxipper sends to sxipper.com to track service utilization.
We want to ensure that users are having a positive Sxipper experience and that the sxipper.com servers are not being abused and are properly resourced. Random cookies enable us to understand the general usage patterns of the sxipper.com servers, what locales and regions are utilizing Sxipper and determine the number of active Sxipper users and what version is being used.
One of the key features of Sxipper is the use of community generated form maps. These maps tell Sxipper how to fill in a form. Users train Sxipper and the maps are submitted to the sxipper.com servers, where they are published to
Since Sxipper's launch we have had hundreds of feature requests. Here are some of the more popular requests that we plan on implementing:
You will be able to synchronize your logins and personal data between multiple computers, and when you setup a new computer, you will just need to install Sxipper and authenticate to retrieve all your data. Your privacy and control of your data is of the utmost importance to us, and we have a unique synchronization strategy that will raise the bar in synchronization services.
You will be able to "bookmark" your frequent sites and log into one or a whole list with a single click. You will also be able to share your bookmarks with others without sharing your password.
Want Sxipper to make sure it is really you at your computer when you login to sensitive sites or release sensitive data? You will be able to tell Sxipper these are sensitive operations and that it is really you before doing them.
You will be able to see what sites you have visited and when, what data you have given a site and which sites you have given specific data.