What a job application autofill extension has to get right
Filling a form in is the easy half. Every browser already pastes a name and an email into the right boxes, and it has never once saved anybody an evening, because the boxes that take an evening are the other ones: the essay about why this company, the compensation expectation, the work authorisation question phrased differently by every employer, and the file upload that wants the version of your resume angled at this posting rather than the one you last downloaded. An extension that only knows your address is autofill; an extension that knows what you should say is the thing people are actually searching for.
- Read the form as a form: every question, which of them are required, and what each one will accept. A select with six options is a different problem from a free text box, and pasting into one of them fails silently.
- Know which of your answers belongs in which box, even when two employers have phrased the same question in ways that share no words.
- Bring an answer that was written for this posting, not for the last one.
- Attach the right file, which means the tailored version rather than whatever is newest in your downloads folder.
- Leave the send to you. Anything that presses the button on your behalf has made a decision that was not its to make, on a form you had not read.
Why the last step runs in your browser at all
Through 2026 every large board added a check that a submission came from a person at their own computer. One scores every application as it arrives and quietly refuses the ones it reads as automated. One puts a human check over its own form. One holds the application until a one-time code it has just emailed is typed back in. None of those is a wall against you, and I do not work around any of them: they are walls against a server applying on somebody's behalf from somewhere else, and they are right to be there.
- Two of the four boards I read will not accept an application made anywhere but your own machine. On those two, this extension is not a convenience, it is the only way an application arrives at all.
- Your browser, your connection, your session. There is nothing to defeat and nothing to pretend, which is why this reads as a person applying: it is a person applying.
- Where a board emails a code after you press submit, the code box gets filled in the same way and the extension stops again at the button that confirms it.
- On the other two boards nothing needs to run on your machine, so nothing does. Those can be sent for you, unattended, on a daily run you switch on.
- Every application is taken to the point where it is ready to send. Then it goes when you say so: press send yourself, press the button and I fill in the employer's form, or switch on the daily run and I do it unattended. Where a board only accepts a form filled in on your own machine, a small browser extension does that part and you press submit. Where a board emails you a code before it will take the application, I read that code out of the mailbox you connected and finish the form.
Where the answers come from
The extension carries no knowledge of its own. It asks for the answers to the form in front of it, and what comes back is the work already done on your account: the profile you corrected once, the answer bank you have been filling in as questions come up, and the resume and cover letter written for this specific posting when you queued it. That is the whole difference between this and a form filler. The same code decides what goes in a box here as decides it when an application is sent for you, so the two cannot drift into answering the same employer differently.
- Contact details, work authorisation, notice period, location, and the rest of the questions every form asks, from the profile you checked yourself.
- The saved answers you have written once and never have to write again, matched to the question in front of you rather than to its exact wording.
- The resume version written for this posting, attached as a file, and the cover letter written for that company.
- A question nobody has ever answered is left blank and sent back to your answers screen rather than guessed at. A guess on an application is a claim you did not make.
- It tells me it filled that one in, so the row on your applications screen can ask whether it went through. It cannot know that on its own, because pressing submit is yours.
What it can see, and what leaves your browser
An extension is the one part of this product that runs on somebody else's page, so the permissions are worth reading rather than clicking through. It asks for four job board domains and this site, and it cannot read anything else: not your mail, not your bank, not the tab beside it. On the four boards it acts when you click it and at no other time.
- Five sites in total, named in the install prompt. Any other page is invisible to it.
- What leaves your browser is the address of the job page you clicked it on, and an access key issued from your account. The contents of the page are read in the tab and sent nowhere.
- The key is yours to revoke, from the same screen that issued it, and revoking it stops the extension dead in every browser it was handed to.
- No browsing history, no analytics on the pages it runs on, no reading a form you did not ask it to fill in.
- It is open about what it is: the privacy page describes it in the same words as the store listing's data disclosures, because both are answered from the same text.
What it never does
The short version of every section above, in one place, because the thing people want to know about an extension that applies for them is where it stops.
- It never presses the employer's submit button. It scrolls that button into view and stops, every time, on every board.
- It never invents an answer. A question with no answer on file is left for you.
- It never defeats a human check. Where a board puts one over its form, you clear it, because that is exactly what it is asking for.
- It never edits your resume on the page. What it attaches is the file your account already holds.
- It never runs on a site outside the five it names, and it never runs on those five without a click.