Native Web Push • RFC 8291 / RFC 8292

How to Set Up Browser Push Notifications

Receive instant, real-time desktop and mobile push alerts for upcoming SSL expirations, domain renewals, and DNS issues directly in your web browser. No apps, bots, or software downloads required.

Multi-Device Support

Connect your work laptop, home desktop, mobile phone, and tablet as independent notification channels. ExpiryHawk alerts all active devices concurrently.

Encrypted Payloads

Alert payloads are encrypted using IETF RFC 8291 aes128gcm and authenticated via RFC 8292 VAPID ECDSA keys. Only your browser can decrypt them.

Native OS Integration

Delivers native banners in macOS Notification Center, Windows Action Center, Android system notifications, and Linux desktop notification servers even when ExpiryHawk is closed.

Step-by-Step Setup (Takes 30 Seconds)

1

Open Notification Settings

Log in to your ExpiryHawk account and navigate to Integrations & Alerts (or click your profile menu → Alert Integrations).

Go to Integration Settings
2

Click "Browser Push" Integration

In the Add More Integrations section, click the Browser Push card. A configuration modal will pop up. ExpiryHawk automatically detects your browser type and operating system to suggest a friendly label (e.g. Chrome on Linux, Safari on macOS, or Firefox on Windows).

Custom Device Naming: You can customize the name (for example, "Work MacBook Pro" or "Personal Pixel 8") to easily manage multiple devices.
3

Grant Browser Notification Permission

Click the purple "Enable on this Browser" button. Your browser will prompt you with a native confirmation dialog:

🔔 "expiryhawk.com wants to Show notifications" → Click [Allow]

Once allowed, ExpiryHawk registers a light Service Worker (/sw.js), exchanges public VAPID keys, and links your browser to your alert delivery pipeline.

4

Send a Test Alert

After the page refreshes, your device will be listed under Configured Channels. Click the Test button to fire an immediate test push notification. You should see a native alert banner appear on your screen!

Brave Browser Notice

Troubleshooting Brave: "Registration failed - push service error"

Brave is built on the Chromium engine. For user privacy, Brave disables the background Google Firebase Cloud Messaging (FCM) push service by default. If this privacy setting is enabled, calling pushManager.subscribe() throws:

AbortError: Registration failed - push service error

How to Enable Push Messaging in Brave:

  1. Open a new tab in Brave and navigate to: brave://settings/privacy
  2. Scroll down (or use the settings search bar) and locate the toggle: "Use Google services for push messaging"
  3. Toggle this setting to ON (Enabled).
  4. Relaunch Brave to apply the network daemon change.
  5. Return to ExpiryHawk, open Integrations, and click Enable on this Browser.
Privacy Note: ExpiryHawk encrypts all notification bodies with end-to-end AES-128-GCM. Neither Google nor intermediate push relays can read your certificate names, domains, or expiry details.

Apple Safari (macOS & iOS) Setup

Web Push is supported on macOS 13+ (Ventura, Sonoma, Sequoia) and iOS 16.4+.

macOS Safari

1. Open Safari and grant permission when prompted.

2. If alerts do not appear, open System Settings → Notifications → Safari and ensure "Allow Notifications" is enabled and set to Banners or Alerts.

3. In Safari, check Settings → Websites → Notifications to verify ExpiryHawk is set to Allow.

iPhone & iPad (iOS 16.4+)

1. Open Safari on your iPhone or iPad and navigate to ExpiryHawk.

2. Tap the Share button (square with arrow up) at the bottom of the screen.

3. Tap "Add to Home Screen" and tap Add.

4. Open the ExpiryHawk icon from your Home Screen, go to Integrations → Browser Push, and enable alerts.

Managing Your Registered Devices

Under Integrations & Alerts, each connected browser or device appears as an independent alert channel.

Test Button: Instantly sends a live notification payload to that specific device to verify connectivity.
Toggle Switch: Temporarily pause notifications on any device without losing the pairing.
Automatic Dead Endpoint Cleanup: If you reset your browser or uninstall the app, the push service returns HTTP 410 Gone; ExpiryHawk automatically detects this and marks the subscription inactive, keeping your account clean.

Ready to receive instant browser push alerts?

Enable notifications on this browser in seconds and never let an expiring SSL certificate or domain surprise your team again.

Configure Browser Push Now