Chrome Web Store

116Versions

1Code reviewed

No malware found

In code review (v2026.2.0.5)

Our reviewer read version 2026.2.0.5 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.

What our analysis found

Devolutions Password Manager, used by 70,000 people, showed no malicious code in Extension Auditor's review. Its permissions mean it can read and change data on all websites, can inject scripts into pages and can observe network requests. It comes from a trusted publisher and was last updated in October 2026.

Analyst notes

All network requests target user‑configured Devolutions servers or known Devolutions‑controlled domains ([domain withheld], [domain withheld], [domain withheld]). Broad permissions (webRequest, scripting, cookies, etc.) are necessary for a password manager that performs form‑filling, auto‑capture, and basic‑auth integration. No hidden data exfiltration, obfuscation, or unauthorized third‑party endpoints were found. The extension’s behaviour matches its published description and category.

Devolutions Password Manager Chrome extension security report

ID: neimonjjffhehnojilepgfejkneaidmo

Supported Languages

🇹🇼Chinese (Traditional)

🇨🇿Czech

🇳🇱Dutch

🇫🇷French

🇩🇪German

🇭🇺Hungarian

🇮🇹Italian

🇵🇱Polish

🇷🇺Russian

🇪🇸Spanish

🇸🇪Swedish

🇹🇷Turkish

🇺🇦Ukrainian

🇺🇸US English

Extension Info & Metadata

Status

Active

Version

2026.3.1.9

Size

4.65 MB

Rating

3.7/5

Reviews

Users

70,000

Type

Extension

Updated

Oct 1, 2026

Publisher Contextual Analysis

Trusted

Author: Devolutions
Privacy: Privacy Policy
Help: Help Center
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Extensions

Active

Obsolete

Listed

Unlisted

Users

70,000

Screenshots & videos

Install growth

User Growth

Showing data from Sep 10, 2023 to Sep 08, 2024

Versions

+16.67%(+10,000 users)

Compared to 3 months ago

24 versions released in this period

Rating Count

Total: 31 ratings

Average Rating

Current: 3.77 / 5.0-0.03

See plans

React Flow

Internal permhash`3ce7191c48…`
No malicious matches

1 other extension carries this fingerprint, none of them known malicious.

Withheldnot flagged

Permhash (Mandiant)`e556ab6ef1…`
No malicious matches

No other extension carries this fingerprint.

Item	Type	Severity	Description
scripting	Permission	Critical	This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
webRequest	Permission	Critical	This permission enables the extension to monitor and analyze all web requests made by the browser. Rated Critical because it can observe all network traffic including sensitive data, track browsing behavior, and gather authentication tokens.
webRequestAuthProvider	Permission	Critical	This permission allows the extension to handle authentication requests and modify authentication headers. Rated Critical because it can intercept login credentials, session tokens, and modify authentication flows to compromise accounts.
:///*	Host	Critical	Broad host access — the extension can read/modify content on every website.
nativeMessaging	Permission	High	This permission enables communication with applications installed on your computer. Rated High because it can exchange data with native programs, potentially exposing system-level information and local files.
cookies	Permission	High	This permission provides full access to read and modify browser cookies. Rated High because it can steal session tokens, modify authentication cookies, and compromise accounts across websites.
offscreen	Permission	High	This permission creates hidden browser documents with full DOM access. Rated High because it can run background operations invisibly, potentially executing malicious code without user awareness.
clipboardWrite	Permission	High	This permission allows modification of clipboard content. Rated High because it can inject malicious content into the clipboard, modify copied passwords, and manipulate copied data.
Dangerous Permission Combination: scripting,cookies,webRequest	Risk Factor	High	Affects data integrity and user control
Contextual Risk Factors	Risk Factor	High	The following context increases the overall risk: • 10% increase: Early script execution enables pre-emptive content manipulation • 25% increase: Unsafe code evaluation capabilities increase attack surface • 10% increase: About:blank access enables potential sandbox escape vectors
Broad Host Permissions	Risk Factor	High	This extension has broad host permissions allowing it to access many or all websites.
Broad Content Script Access	Risk Factor	High	This extension can inject scripts into any website.
Unsafe WebAssembly Execution	Risk Factor	High	This extension's CSP allows "wasm-unsafe-eval".
storage	Permission	Medium	This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
tabs	Permission	Medium	This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
unlimitedStorage	Permission	Medium	This permission removes storage quota restrictions. Rated Medium because it can store large amounts of user data without limits, potentially impacting browser performance and storing extensive tracking data.
activeTab	Permission	Medium	This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
Early Content Script Execution	Risk Factor	Medium	This extension runs content scripts at document_start.
About:blank Access	Risk Factor	Medium	This extension can run content scripts in about:blank pages.
contextMenus	Permission	Low	This permission adds items to browser context menus. Rated Medium because it only modifies right-click menus without access to page content.
idle	Permission	Low	This permission detects system idle state. Rated Low because it only observes user activity state without access to activity details.

About this extension

Form filler that obtains entries from Remote Desktop Manager, Devolutions Server, and Devolutions Hub

Read the publisher’s full description

With a single click, easily sign in to your favorite websites using your secured passwords. Workspace Browser Extension complements Devolutions Server, Devolutions Hub Business, Devolutions Hub Personal, and Remote Desktop Manager, enabling users to securely inject passwords into websites stored in their vaults. The Devolutions Workspace browser extension provides users with a simple method of automatically connecting to websites without ever having to remember the password. Also connected to Devolutions Hub, the extension can display all entries from your vault, enabling you to view and copy sensitive information like credit card information, contacts, and more.

User reviews

3.5 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Does this thing do anything useful? It sure doesn't auto-fill my passwords for me. My company says I must use it.

Travelling Tech·11 Jul 2026

Easy to use tool to access my website logins, OTPs, and other sensitive data from my Devolutions Cloud account.

Yann Lemasson·8 May 2026

Wenn das Plug-in funktioniert ist es top, leider bekomme ich mehr als die Hälft der Zeit nur einen weißen Strich angezeigt und muss dann die Website aufrufen und mir die Zugangsdaten da dann kopieren...

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

No network indicators were extracted from this version.

Version	Size	Verdict	Findings	Permhash
2026.3.1.9 Latest	4.65 MB	Not scanned	—	e556ab6ef12fa448a24cac3a69099a9aa7eed565a50abe42f71c0d3401439fc0
2026.3.1.8	4.65 MB	Not scanned	—	e556ab6ef12fa448a24cac3a69099a9aa7eed565a50abe42f71c0d3401439fc0
2026.3.1.7	4.65 MB	Not scanned	—	e556ab6ef12fa448a24cac3a69099a9aa7eed565a50abe42f71c0d3401439fc0
2026.3.1.5	4.65 MB	Not scanned	—	e556ab6ef12fa448a24cac3a69099a9aa7eed565a50abe42f71c0d3401439fc0
2026.2.4.6	4.25 MB	Not scanned	—	116bec0956adbc78b78131e2e2dabfc57db7153454e619738b99c25b90b62ae7
2026.2.4.8	4.25 MB	Not scanned	—	116bec0956adbc78b78131e2e2dabfc57db7153454e619738b99c25b90b62ae7
2026.2.1.3	7.99 MB	Not scanned	—	e556ab6ef12fa448a24cac3a69099a9aa7eed565a50abe42f71c0d3401439fc0
2026.2.3.5	4.21 MB	Not scanned	—	e556ab6ef12fa448a24cac3a69099a9aa7eed565a50abe42f71c0d3401439fc0
2026.2.0.6	7.99 MB	Not scanned	—	e556ab6ef12fa448a24cac3a69099a9aa7eed565a50abe42f71c0d3401439fc0
2026.2.0.5	7.99 MB	No malware found	0	e556ab6ef12fa448a24cac3a69099a9aa7eed565a50abe42f71c0d3401439fc0

Showing 1 to 10 of 120 rows

Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

Popular in Workflow & Planning

Adobe Acrobat: PDF edit, convert, sign tools346,000,000 users
Application Launcher For Drive (by Google)99,000,000 users
AdBlock — block ads across the web65,000,000 users
Chrome Remote Desktop41,000,000 users
Adblock Plus - free ad blocker40,000,000 users

No malware found

What our analysis found