extension ExtPose

PassProtect (delisted)

CRX id

cpimldclklpfifolmdnicjnfbjdepjnf-

Description from extension meta

Stop using bad passwords. PassProtect alerts you about breached credentials. Powered by "Have I Been Pwned?".

Image from store PassProtect
Description from store PassProtect is a simple Chrome extension that dramatically improves your personal security when browsing the web. There are a lot of passwords floating around the web because they were exposed in a data breach. Threat actors can use these exposed passwords to try to compromise your account – don't let them get in by using an exposed password! PassProtect works by checking your password against the fabulous Have I Been Pwned? API service (https://haveibeenpwned.com/) to see whether or not the password you are using in any web login has been breached in the past. PassProtect uses 'k-anonymity', which ensures that your passwords are never seen, stored, or sent over the network during this checking process. You can learn more about k-anonymity by reading this excellent article: https://blog.cloudflare.com/validating-leaked-passwords-with-k-anonymity/ PassProtect is a new, experimental way to help individual users play a more active role in protecting their online accounts. We believe that by informing and guiding users to reset their credentials when necessary, we can all help make the web a safer place! <3 Randall + Okta NOTE: This extension does not collect or store any information or passwords. You can view our privacy policy online: https://www.passprotect.io/legal/

Latest reviews

  • (2020-12-28) Виктор Бессуднов: не могу удалить его из chrome,восстанавливается каждый раз
  • (2019-11-15) Luke Wolfenden: Good product, but it would be more helpful if you could customise the message that appears. Especially for deploying to organisations or businesses. You could make use of variables to customise the message and have this managed in a deployable setting somewhere.
  • (2019-08-02) Phillip Knoll: Great concept and sorely needed! I wish it had a way to discern when I'm entering a one-time password for 2FA however... The 2FA use case triggers a false-positive alert.
  • (2019-07-25) Lohengrin Percival: Useful extension, but the lack of a website blacklist is annoying.
  • (2019-03-29) Casey Moore: I love this thing. It's nice to know if my password has been in a breach before.
  • (2018-08-04) Alex Bass: Love this, works great! The only thing I dislike about it is it will also check on misc sites that say like "enter the last 4 of your SSN" and it always pops up to say that the last 4 of SSN "password" has been in many data breaches. Wish it could distinct itself from actual password fields and fields like this or security question fields. Keep up the great work! I am force-installing it across all of our clients (:
  • (2018-07-20) Works great!
  • (2018-07-03) Thom Peterson: Very clever scam from "Microsoft" wanted me to give info and call them to remove threats. Hmmmm. Glad I have this notification system.
  • (2018-06-27) Adam Culp: Works wonderful. Already highlighted a couple concerns for me in the first couple days of use. Hope to see some form of viewing past history of alerts, in future iterations.
  • (2018-06-24) PeteLimR: Thank you for your app.I just got notification. I am studying how to protect myself.
  • (2018-06-02) owl: RSSフィードで購読している「ghacks.net」で、興味深いアプリが紹介されていました。 PassProtect warns you about insecure passwords(PassProtectは安全でないパスワードについて警告します):Author Rating(著者評価)★ 5(満点) https://www.ghacks.net/2018/05/28/passprotect-warns-you-about-insecure-passwords/ PassProtect は、使用しているパスワードがデータ侵害で公開(漏洩・暴露)されているかどうかをリアルタイムで簡単に発見できるブラウザプラグインです。 リアルタイム通知により、安全でないパスワードをユーザに迅速に警告し、プライバシーを侵害することなく即座に対応することができます。 PassProtect はパスワード情報をネットワーク経由で送信または保存することはありません。 それは危険なくインターネット上で機密データを安全に通信するために、k-Anonymity を使用します。 PassProtect は完全に無料でオープンソースであり、Randall Degges 氏が管理しています。 ソースを監査したい場合や、より良いやり方をするためのアイデアがある場合は、GitHub(https://github.com/OktaSecurityLabs/passprotect-js )を開いてください。 注意:当アプリは「Google Chrome」と「Iridium」のみが正常に動作します。他の Chromium 系は動作保証がありません。インストールができても、URL(ツール)バーに「icon」を登録できないため、機能不全です。「Firefox 互換が最優先課題なので、その他については今後の研究課題」との公式回答でした(2018/06/02 時点)
  • (2018-05-23) Gustavo Dubra: no es segura
  • (2018-05-23) Sami Laine: Works as described, and developed & published by well known identity and security company.
  • (2018-05-17) Aaron Parecki: This is a clever way to automatically check your emails and passwords against the haveibeenpwned.com database! It's worth noting that your password is never actually sent anywhere thanks to the clever solution they came up with for checking partial password hashes. More info on that here: https://www.troyhunt.com/ive-just-launched-pwned-passwords-version-2/#cloudflareprivacyandkanonymity
  • (2018-05-16) Lauren Sheppard: When breaches occur, I always wonder if my credentials are still safe. This extension takes all the hassle out of checking that. We all know we need better passwords and this extension makes it painless and easy.
  • (2018-05-16) Tom Abbott: Passprotect is the extension the internet needs. Troy hunt did a great job aggregating breaches and breached account, and this extension does a fantastic job letting you know that either there was a breach of your username and password on any site. It is so easy to use, I already recommended it to my family members so they can be safer online. That is saying something!
  • (2018-05-15) Randall Degges: I wrote this extension, so I'm a bit biased -- but I really like it. One of the lame facts of life is that your credentials will eventually be breached. Maybe not today, maybe not tomorrow, but at some point? Definitely. Security is always evolving and it's important to know when your credentials are leaked so you can take action to update your passwords. This extension was designed to proactively notify you whenever you enter a bad password into a login or registration form. It'll also notify you if your credentials have been breached. I hope you find it useful! <3

Latest issues

  • (2019-05-07, v:0.1.8) Toolfarm Inc: 44 data breaches
    Hello, We have a wordpress blog and with with both the main admin and my own personal login we are getting notifications that we have 44 data breaches with this password. We've changed the passwords for both accounts and we are still having the same error, only on our own wordpress pages. It's very odd. Do you know what could be triggering this message?
  • (2019-02-18, v:0.1.8) HoKy: Domain Exceptions and/or "Nth character" exception
    Hello, We've rolled this out on our image at work, and it works obviously, but our Finance department has an issue with it: the bank asks for specific characters out of the password, rather than the whole password. For every single character, the extension pops up a warning that it is not a secure password. Is it possible to adjust this to either skip these kinds of fields, or to make domain name exceptions for the extension to check?
  • (2018-07-24, v:0.1.8) A.W. Casas: Foreign Language Sites?
    Sometimes when I visit an eBay/Craigslist type site in Austria (www.willhaben.at) via a link contained in an email which the site sends me periodically, your plugin is triggered. I've tried visiting the site (by clicking on one of the site's email links) when I'm not logged in to the site, and while extension is not triggered initially, if said page is suspended using the Tab Suspender extension, as soon as the page is un-suspended, your extension pops up the warning (despite still not being logged in). There is no password field on the page so there is nothing being pre-populated by Chrome. The link on the email does not appear to have any login credentials encoded (the site will not log me in just by clicking the link if I logged out last session). I've no idea why your extension is showing a warning. Any ideas? Is there a conflict with the site being in German or Google Translate's extension working to translate into English? Any conflict with Tab Suspender?
  • (2018-06-06, v:0.1.8) Peter Freeman: Warning pop-up box
    Today, for the first time, I saw the warning pop-up when I entered my Gmail password to log in to YouTube - "Found in 144 data breaches" is all I was able to register, because the window was on-screen for less than a second before vanishing. I had hit Enter to send the password, but I did not hit Enter a second time to clear the pop-up. Is there some way to make this box stay up until I've had time to read it and then dismiss it?
  • (2018-06-01, v:0.1.8) Meg M: What data does the extension change?
    When I click on the extension to add to chrome, a popup appears stating the it "can read AND CHANGE ALL YOUR DATA on the websites you visit". That concerns me. What data is it changing? I won't download it until I have a clear answer to this question. thanks-
  • (2018-05-31, v:0.1.8) App should indicate when it found and checked a password
    This app does not detect the password box on some sites (try naturebox.com). I tested by entering 'password' and '123456' in the login popup box and PassProtect showed nothing. Then I did same test for linkedin.com and PassProtect gave the bad password warning. The app should give you some indication it found a password and checked it. Maybe have the icon change color briefly when it is checking a password. This way, the user can tell that PassProtect did NOT detect the password and leave user with a false sense of security. Steve
  • (2018-05-30, v:0.1.8) Peter Watkins: options are greyed out
    i'm not certain this is working
  • (2018-05-29, v:0.1.8) James Hopkins: does nothing
    all this extension does is bring me to the passprotect page, then I clock on download the extension and it brings me here, to the same place where I got the extension originally. I tried to test it by typing obvious bad passwords into password fields like "password" or "letmein" and nothing happened. I also logged into an account that has show hacked on haveibeenpwned, and nothing happened, so I don't know how this is supposed to work at all
  • (2018-05-24, v:0.1.8) pjbuehler: Same issue reducks . . .
    downloaded the app in chrome, but nothing happens when I click on the app icon Posted by p.j. Buehler
  • (2018-05-24, v:0.1.8) Durk Hartman Hoekstra: Same issue
    downloaded the app in chrome, but nothing happens when I click on the app icon

Statistics

Installs
31,492 history
Category
Rating
4.6 (34 votes)
Last update / version
2018-06-30 / 0.1.8
Listing languages

Links