Connecting the extension to your account

Pair the extension with Applivo.

Connecting (pairing) links your installed extension to your Applivo account without ever sharing your Applivo password with the extension. Applivo uses a PKCE-style handshake: the extension proves it holds a secret verifier, and the server issues it a scoped token in return.

Pair the extension

1. Open the extension popup and choose Open Applivo, or navigate to /extension/connect on the website.
2. Sign in with an account that has an eligible plan.
3. The website and the extension exchange a short-lived, single-use pairing code. The extension generates a random verifier and keeps it; only its hash ever reaches the server.
4. The extension redeems the code directly with the server and stores the resulting token in its own Chrome storage.
5. The popup changes to Connected.

What the token is

• A scoped token that can only call the /api/ext endpoints; it cannot read your chat history, billing or admin data.
• Stored in Chrome's extension storage, never in the website's localStorage or the page DOM.
• Revocable at any time from your account, which immediately invalidates it server-side.

See Extension permissions and privacy for what the extension can and cannot access.

Disconnecting and revoking

• Disconnecting from the popup or from the website revokes the calling token server-side.
• Each new pairing for the same device label revokes the previous token, so reconnecting never piles up stale tokens.
• Tokens also expire on their own after the configured lifetime (30 days by default).

Common problems