How CVCircuit Connects to Your Account With One Click
No separate extension login
Many browser extensions require you to create a separate account, or log in through an extension-specific flow that feels disconnected from the main product. CVCircuit's connection process works differently.
Because you're already logged in to CVCircuit on the web, the extension can connect instantly — no password, no separate form, no re-entering credentials.
How the connection works
When you click Connect your CVCircuit account in the extension:
- CVCircuit checks whether you have cvcircuit.com open in a tab
- If you do, it reads your authentication tokens directly from that tab (with your permission)
- If you don't, it opens cvcircuit.com in a new tab and waits for you to be logged in
The tokens are read from the browser's localStorage on cvcircuit.com — the same tokens your active session uses. No credentials travel over the network. No passwords are handled by the extension.
Your email is displayed in the extension header once connected, with a green status dot, confirming which account is linked.
Staying connected
Once connected, your session persists. The extension stores your tokens locally and refreshes them automatically every time you visit cvcircuit.com.
If your token expires (typically after a session period), the extension shows a clear amber banner: "Session expired — Reconnect." One click repeats the connection flow — instant if you're already logged in on the web.
Disconnecting
You can disconnect your account from the extension at any time via the logout button in the header. This clears the stored tokens from local extension storage.
Why this approach is better
For you: no extra login friction. If you're already using CVCircuit, the extension connects in one click.
For security: your credentials never pass through the extension. The connection mechanism relies on the same session your browser already has with cvcircuit.com, using standard web authentication tokens.
It's the most frictionless connection flow possible — because the hardest part (authentication) is already done.