Match detection for URIs

A login item stored in your safe can have one or more URI values associated with it. URIs can relate your login to a website address (URL), server IP address, mobile app package ID, and more. URIs are important values for a login since they determine how the auto-fill functions in SecretSafe will behave.

URI schemes#

A well-formed URI also has a "scheme" at the beginning of it. The most common scheme that many of us are familiar with is the http:// scheme used for a website address.

The scheme can also have special meaning in SecretSafe:

  • http:// or https:// tells SecretSafe that this is a website address. Example:
  • androidapp:// tells SecretSafe that this is an android application package ID (or package name). Example: androidapp:// Android apps typically follow reverse domain name notation.

If a URI omits the scheme, http:// is assumed.

Match detection options#

Each URI for a login item also has an associated "match detection" value. The match detection value determines whether or not SecretSafe will offer the login as an available option when performing an auto-fill.

While editing a login you can adjust the match detection value for a given URI by selecting the Options button next to the URI's value.

The following match detection options are available:


Base domain is the default URI match detection value for all URIs. You can adjust this default value under Settings โ†’ Options.

Base domain

The base domain is defined as the second-level domain plus the top-level domain of the given URI. A URI with a value of would have a base domain value of


  • URI base domain value:
  • Matches:,,,
  • Not matches:,


The host is defined as the hostname plus an optional port of the given URI. A URI with a value of would have a host value of


  • URI host value:
  • Matches:,
  • Not matches:,,,,

Starts with

The "starts with" option requires that the current website/application URI must start with the value defined in the URI. A URI with a value of starts with


  • URI starts with value:
  • Matches:,
  • Not matches: (notice the missing trailing slash),, (has a port)

Regular expression


Regular expressions are an advanced option and can be quite dangerous if used incorrectly. You should not use this option if you do not know exactly what you are doing.

The regular expression option allows you to write any simple or complex regular expression to match the current website/application URI. All regular expressions are case insensitive.


  • URI regex value: ^https://.*$
  • Matches:,,,
  • Not matches: (not https),


The "exact" option requires that the current website/application URI exactly match the value defined in the URI.


  • URI exact value:
  • Matches:
  • Not matches: (not https),,


A URI with match detection set to "Never" will never be offered for auto-fill.


  • URI never value:
  • Matches: none
  • Not matches:,,