Chrome Web StoreNo malware found
In code review (v6.2.1)
Our reviewer read version 6.2.1 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.
491 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
What our analysis found
Authenticator, used by 9,000,000 people, showed no malicious code in Extension Auditor's review. Its permissions mean it can inject scripts into pages. It comes from a trusted publisher and was last updated in August 2024.
Analyst notes
The extension is a well-known 2FA authenticator with over 8 million users and a trusted publisher. The source code (content script, options, test pages) shows no malicious behavior: screen capture is used only for QR code scanning, code insertion is limited to detected 2FA fields, and all network destinations are the user-authorized cloud backup APIs (Google Drive, Dropbox, Microsoft) as disclosed in the extension description. The bundled manifest is MV2 with broad permissions (file://*/*, cloud API hosts), but these are required for the advertised features. The live CWS listing shows an MV3 version with reduced permissions, indicating the extension is moving to a more secure model; the mismatch is noted but does not indicate current malice. The ML risk score is 0.00 and third-party risk is low, contradicting the risk-engine's high rating which is based solely on permission sensitivity and an older manifest.
Authenticator Chrome extension security report
ID: bhghoamapcdpbohphigoooaddinpkbai
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- http://authenticator.cc/
- Privacy
- Privacy Policy
- Help
- Help Center
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- No
- Mailbox exists
- Yes
- Website
- Visit
Screenshots & videos
Install growth
491 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
About this extension
Authenticator generates two-factor authentication codes in your browser.
Read the publisher’s full description
Authenticator generates two-factor authentication (2FA) codes in your browser. Use it to add an extra layer of security to your online accounts. Always keep a backup of your secrets in a safe location. Encrypting your secrets is strongly recommended, especially if you are logged into a Google account. Features: - Add accounts by scanning QR codes - Search your accounts by pressing "/" - Translated into more than ten languages - Encrypt your secrets with a password - Backup your secrets to a file, Google Drive, Microsoft OneDrive, or Dropbox - Sync your secrets with your Google Account - Import data from Google Authenticator offical mobile App - Open source Supports: TOTP HOTP Steam Guard Blizzard Authenticator
User reviews
Extension files
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
491 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
Gain full insight into all external connections.
Upgrade for full visibility.
Related extensions
Popular in Privacy & Security
- McAfee® WebAdvisor161,000,000 users
- uBlock Origin Lite21,000,000 users
- Imprivata Enterprise Access Management20,000,000 users
- Kaspersky Protection19,000,000 users
- VPN for Chrome: NordVPN proxy protection15,000,000 users