No malware found
In code review (v8.5.13)
Our reviewer read version 8.5.13 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.
What our analysis found
FlowCrypt: Encrypt Gmail with PGP, used by 80,000 people, showed no malicious code in Extension Auditor's review. Its permissions mean it can inject scripts into pages. It comes from a trusted publisher and was last updated in September 2026.
FlowCrypt is a well-known open-source PGP encryption extension for Gmail with 80k+ users and a 4.7 rating. The required permissions (scripting, identity, tabs, etc.) are essential for its core functionality: injecting a secure compose UI into Gmail, authenticating via OAuth, and accessing email APIs. All outbound network communication is to first-party or necessary service domains (, Google APIs, Microsoft Graph) and falls within the disclosed 'Personally identifiable information' data collection category. The ML model false positive is explained by broad permissions, large minified libraries (, emailjs), and expected UI operations (innerHTML, appendChild). No evidence of data exfiltration, tracking to undisclosed third parties, or malicious code injection was found.
FlowCrypt: Encrypt Gmail with PGP Chrome extension security report
ID: bnjglocicdkmhmoohhfkfkbbkejdhdgc
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- FlowCrypt a. s.
- Privacy
- Privacy Policy
- Help
- Help Center
- MX records exist
- No
- Domain exists
- No
- Is disposable
- No
- Is role-based
- No
- Mailbox exists
- No
- Website
- Visit
Email Change History
Screenshots & videos
Install growth
Sensitive Domain Access
This extension has access to the following sensitive domains:
- https://*.google.com/*
- https://outlook.live.com/*
- https://outlook.office365.com/*
- https://outlook.office.com/*
- https://www.googleapis.com/*
Gain full insight into all external connections.
Upgrade for full visibility.
About this extension
Simple end-to-end encryption to secure email and attachments on Google.
Read the publisher’s full description
🟢 A simple end-to-end encryption to secure your emails and attachments on Google, including Google Workspace, Business, and Enterprise using OpenPGP. 🟢 FlowCrypt lets you use PGP encryption by generating a private and public key. It uses the recipient’s public key to encrypt the email, and only the recipient’s private key can decrypt the message and reveal its content. 🟢 Adds a Secure Compose button to Gmail, allowing you to send private PGP-encrypted emails when you choose to. 🟢 We update the extension regularly (see the "Updated" field to the right). FlowCrypt allows you to: ✔ Set up the extension in just a few clicks. ✔ Generate private keys using the ECC and RSA (up to 4096-bit) algorithms. ✔ Use FlowCrypt’s own Attester public key server. ✔ Send and receive encrypted emails and attachments (up to 25MB, with previewing functionality) to anyone. ✔ Send and receive encrypted emails directly or through Encrypted Contact Page. ✔ Send password-protected emails to the recipient who doesn’t have any OpenPGP software (as well as receive such emails). ✔ Sign encrypted emails to let your recipients verify that the message is from you and that the content hasn’t been modified. 🌐 Website: https://flowcrypt.com/ 📁 Source code: https://github.com/FlowCrypt/ 📚 Documentation: https://flowcrypt.com/docs/ 🧠 Knowledge Base: https://flowcrypt.com/blog/questions/ 📱 Android & iOS apps: https://flowcrypt.com/download 📩 Looking forward to your feedback! Please email us at human@flowcrypt.com.
User reviews
Extension files
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.
No network indicators were extracted from this version.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
Gain full insight into all external connections.
Upgrade for full visibility.
Related extensions
Popular in Communication
- Cisco Webex Extension10,078,689 users
- Cisco Webex Extension2,671,107 users
- Loom for Edge706,939 users
- KeePassXC-Browser579,887 users
- minutes capture500,000 users