Okta Phishing Detection

The extension only shows a red warning banner when a page appears to be an Okta login page but the site is not a subdomain of okta.com—a strong sign of phishing or a proxied attack. On real Okta pages (e.g. your-company.okta.com), no banner is shown. There are cases where companies use a custom domain for their Okta login page, in which case you can add the domain to the allow list to prevent the warning from being shown.

You can customize the warning message, optionally block form submission on flagged pages, and add trusted domains to an allowlist so known-good sites are never warned on.

Use it as an extra check before entering credentials on any Okta-style login page.