CUNYAutoLogin Chrome extension security report

CUNYAutoLogin helps you get through CUNY Login faster. If you use CUNYFirst, Brightspace, DegreeWorks, or other tools that send you to the official CUNY sign-in, this extension can fill your email, password, and six-digit authenticator code on the real CUNY pages—so you spend less time retyping the same credentials every time the session expires. What you get - Guided first-time setup in the extension sidebar: enter your @login.cuny.edu CUNY Login email and password, complete one real sign-in, then set up Mobile Authenticator (TOTP) through CUNY’s MFA self-service so the extension can generate login codes locally on your device. - Automatic sign-in on supported flows while your vault is unlocked (for example after Brightspace redirects through CUNY Login). - Encrypted storage: your credentials and authenticator material are encrypted on your computer behind an extension password (vault master password) you choose. Unlocking keeps that password in the browser session; it is not sent to our servers—because there is no cloud account or sync for your secrets. = Optional biometrics (where your OS and browser support it), such as Windows Hello or platform equivalents, so you can unlock the vault without typing the extension password every time. You can skip biometrics and use the password only. - Clear expectations: this is a student-made, open source helper. It is not created by, endorsed by, or affiliated with CUNY. Always keep your existing MFA methods on your CUNY account; do not remove official recovery options. Privacy & security (short version) - Data stays on your device unless you choose to export or you remove the extension. - The extension only needs access to the official CUNY login host and Brightspace (as declared in its permissions) to complete the flows it supports. - If you uninstall the extension or switch browsers, stored data does not automatically follow you—plan to set up again if needed. Requirements - Google Chrome 141 or newer - Your CUNY Login email must end in @login.cuny.edu (not a campus student mail alias).