One Manifest V3 extension for Chromium browsers and Firefox, plus a Windows desktop app for managing every sync profile in one place. All of it talks to one sync destination, one token and one sync name — a server you control, or a free no-server alternative if you don't have one.
Free. No account. No ads. No analytics — verified below. View the source.
Turn on the bookmark sync, the tab sync, or both. They share one endpoint and one bearer token, but each engine namespaces its own file, so they never collide.
Syncs your whole bookmark tree (bar + other bookmarks). Adds, edits, moves and deletes from several devices are merged, not overwritten — the merge engine is covered by a 115-test suite that specifically guards against silent data loss.
Closes the tabs you're done with and saves them as a list, freeing the memory they were holding. Reopen one link, one list, or everything — as ordinary tabs or as a browser tab group.
Self-hosting is a single PHP file with a token you choose. Any server that
answers GET/PUT on ?name=<file>.json
works — the generated script also honours ETag /
If-Match for safe concurrent writes.
One passphrase encrypts both tools with AES-256-GCM in your browser before anything is uploaded. The passphrase never leaves your device — a host only ever sees ciphertext in the file's contents.
Not realistic to self-host? A private GitHub Gist or a JSONBin.io bin work too — both meaningfully less private than self-hosting, which is why the password lock is recommended for either.
The identical extension runs on Chromium browsers and on Firefox — one codebase, one manifest, two builds — and the Windows Control Panel manages every profile from the desktop. Whatever you sync from, the file on your server is the same file.
Published so it can be audited, not just trusted — a sync tool that touches your bookmarks, tabs and credentials should be checkable, not a black box.
Every merge checks how much would disappear against what's actually in your browser right now. Above twenty bookmarks, if four fifths or more would go at once, it stops and asks instead of finishing — an accidental mass-delete isn't silently possible.
“Save settings and credentials” makes one encrypted file with your access code, sync name and password lock already in it — restore it on step 1 of the next computer's setup and there's nothing left to type by hand.
Real screenshots of the extension, not mockups — every one is generated
from the shipping code by scripts/screenshots.mjs. Light and dark follow whichever
theme you're reading this page in.
Bookmarks and Tabs each get their own switch, status dot, saved counts and last-sync time. One click saves every tab in the window; another opens your lists.
Shown: syncing to your own website, with the password lock on.
On a fresh install, the popup shows the same two cards blurred behind two buttons: Walk me through it, or set it up yourself. The guided path asks the same questions as the full settings page, one screen at a time, with Back and Next — not a second, simplified setup to keep in step with the real one. Already set up somewhere else? Step 1 also takes a settings backup and skips the rest.
Shown: step 1, before anything has been chosen yet.
Name a list, pin it to the top, lock it against accidental deletion, search across every title and URL, drag links between lists, then reopen one link, one list, or everything — as ordinary tabs or a browser tab group. Reopening a lot of tabs asks first and opens them in batches you can stop. Anything you delete waits 30 days in “Recently deleted”, and syncs there too.
Pick the sync method, paste the server URL and bearer token once, and both engines use
them. The self-hosting card generates the PHP file and its .htaccess guards
with a fresh token already in place.
Separate sync intervals, duplicate handling, reopening behaviour and backups — bookmarks and tabs are configured independently, each behind “More options”, and either one can be turned off entirely.
The four steps below, in order — or open the popup on a fresh install and click Walk me through it for the same four, one at a time.
Add it from the Chrome Web Store or Firefox Add-ons, or load the source unpacked (see Install).
Download the self-hosting bundle from Options and upload it to any PHP host, or connect a GitHub Gist / JSONBin.io if you don't have a server.
Same server URL + token + sync name on every computer you want to share. Different names stay completely separate.
One passphrase, entered once per device. If you forget it, encrypted data can't be recovered — there's no reset, by design.
Every claim below is checked by an automated test that fails the build if the code ever stops matching it — not just written down and hoped.
history, webRequest, or cookies permission — can't read your browsingOne click on the Chrome Web Store (Chrome, Edge, Brave, Vivaldi, Opera) or on Firefox Add-ons. The Windows app is optional and separate — take it if you juggle more than one sync profile.
chrome://extensions, turn on
Developer mode, then Load unpacked → the folder
containing manifest.json.npm run dev:firefox to build
dist/firefox/ — Firefox needs its own manifest, because the one in the
repository declares a service worker Firefox will not run. Then
about:debugging → This Firefox →
Load Temporary Add-on… → pick that folder's
manifest.json.An unpacked copy never auto-updates — you pull the repo yourself when a new version lands. A temporary add-on in Firefox also goes away when Firefox restarts.
TabbySync Control Panel is the companion Windows desktop app — add, remove, move and copy bookmarks and saved-tab lists across every sync profile you have (work, personal, a home server…) from one place, without a browser. Same self-hosted / GitHub Gist / JSONBin destinations, the same merge and encryption as the extension. It updates itself once installed.
Windows 10/11, 64-bit. Free and source-available under the same license as
the extension, and entirely optional — the extension works fully on its own without it.
Prefer not to run an installer? The release page above also carries a portable
.exe.