MoatKey Get MoatKey
MoatKey · Help

Adding items, filling and saving logins

Last updated October 23, 2026

Add an item

  1. Open the Castle you want and choose + Add item. (Browser extension in the full Castle view; the popup can't add items.)
  2. Pick a type: Login, Authenticator, Secure note, Wi-Fi, Door code or Card.
  3. Fill in the fields. For a login: Service name, Username, Password and the Login URL. Add the Login URL if you want the extension to suggest it on that site.
  4. Choose Encrypt and save.

Everything you save is encrypted on your device before it is uploaded. In a shared Castle, everyone in it sees the item (except items in the Dungeon, which Viewers never see).

Fill a sign-in form (browser)

Browser extension MoatKey fills only when you ask it to. It doesn't add icons to web pages.

  1. Go to the sign-in page and click the MoatKey toolbar icon (or press Alt+Shift+F).
  2. Under For the site's name, find the login. Each one says which site it was saved for.
  3. Choose Fill. If the login has an authenticator, choose Code on the code page.

Faster: press Alt+Shift+L on the sign-in page. If exactly one saved login matches the site, MoatKey fills it. Otherwise it opens MoatKey so you can choose. To see or change the key, type chrome://extensions/shortcuts in the address bar (in Edge, edge://extensions/shortcuts) and find Fill the login for this site under MoatKey.

From Quick Find: in the popup, the active Quick Find row shows a Fill button, only for a login that matches the page you are on. It asks the same questions as the steps above. See Quick Find.

Username on one page, password on the next? Fill the username, continue to the password page, then open MoatKey again. It offers Continue signing in with Fill password.

When MoatKey asks first or won't fill

  • If the page is a different address on the same site, MoatKey asks Fill on that page? Choose Fill anyway only if you trust the page.
  • If the page is not secure (http), MoatKey warns you first, because anyone on the network could read what is filled.
  • MoatKey won't fill a login into a different website, into a form that comes from another site, or into a sign-up or change-password form.
  • Logins with no Login URL are never suggested. Search for them in the popup instead.
  • Items in the Dungeon are never filled.

Fill a payment card (browser)

Browser extension Optional, from version 0.9. Turn it on once: open the full MoatKey page, then Settings, Saving and filling, Fill payment cards. Your browser asks to let MoatKey fill card fields that shops show inside a payment company’s frame; you can say no, and MoatKey then fills only card fields on the shop’s own page.

  1. On a secure (https) checkout page, click the MoatKey toolbar icon.
  2. Under Cards, choose Fill next to the card. MoatKey shows the page it will fill; choose Fill card. The card number, expiry and name are filled.
  3. For the security code, choose Code, then enter your master password, or choose Use Windows Hello instead if you set up passkey unlock.

MoatKey never fills a card on an insecure (http) page or into a frame from an unrelated site; if part of the form comes from such a site, MoatKey tells you what it left empty. Cards in the Dungeon are never filled. MoatKey doesn’t process payments: you still pay the shop as usual.

Save a login from a page (browser)

  1. Type your username and password into the website's form.
  2. Before you leave the page, do one of these: right-click and choose Save this login to MoatKey, press Alt+Shift+S, or choose Save this login in the popup.
  3. MoatKey opens the add form with the details filled in. Check them and the Castle, then choose Encrypt and save. Nothing is stored until you do.

Want MoatKey to offer to save logins? Turn on Settings, Saving and filling, Offer to save logins. Your browser asks once to let MoatKey read secure (https) sites. After you sign in on a site, MoatKey offers to save the login. It’s off unless you turn it on, and turning it off gives that access back. Use Never offer on these sites in the same place to skip a site.

Passkeys (Beta): the extension can also keep passkeys. It is off until you turn on Use MoatKey for passkeys in the same place. See Passkeys in the browser extension.

On your phone (Android, iPhone and iPad)

Phone app MoatKey can fill your logins, and if you want, your payment cards, in other apps and in your browser. Every fill asks for your fingerprint, face or screen lock first.

  1. In MoatKey, open Settings, AutoFill and turn it on. Follow the steps to choose MoatKey as your phone’s AutoFill service.
  2. To fill cards too, turn on Fill payment cards on the same screen.
  • Android: tap a sign-in or card field, then Unlock MoatKey. In Chrome, also turn on Chrome’s Settings, Autofill services, Autofill using another service.
  • iPhone and iPad: turn on MoatKey in Settings, General, AutoFill & Passwords, MoatKey. Then tap a sign-in or card field, tap AutoFill or the key above the keyboard, and choose MoatKey. Each fill asks for Face ID, Touch ID or your passcode. iPhone fills a card one value at a time.

You can always open the item, copy the username or password, and paste it instead. See Copying passwords.

Delete an item

Open the item and choose Delete this login (or Delete this card, note and so on). Owners and Castle Admins can bring it back from Recently deleted for 30 days. See Recently deleted.

Still need help? Email support@moatkey.com.