Chrome Web Store
5Versions
0Code reviewed

Not reviewed

No code review on record

We have not reviewed this extension’s code, so we cannot vouch for it either way. Check the permissions below to decide whether it asks for more than it needs.

Want us to read this extension's code? Ask for a review and we'll queue it.

27 indicators in this extension

27 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

Free Password Manager & Authenticator & SSO, used by 10,000 people, is not yet reviewed by Extension Auditor. Its permissions mean it can read and change data on all websites. It comes from a trusted publisher and was last updated in December 2024.

Free Password Manager & Authenticator & SSO

Free Password Manager & Authenticator & SSO Chrome extension security report

ID: nhhldecdfagpbfggphklkaeiocfnaafm

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Active
Version
5.0.1
Size
0.49 MB
Rating
4.2/5
Reviews
95
Users
10,000
Type
Extension
Updated
Dec 6, 2024
Category
Privacy & security
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
1extension
All still listed

Publisher Contextual Analysis

Trusted
Author
https://www.saaspass.com/
Country
US
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
Yes
Mailbox exists
Yes
Address
44 Tehama St San Francisco, CA 94105 US
Website
Visit
Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Users
10,000

Screenshots & videos

Screenshot 1
Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5

Install growth

Item
Type
Severity
Description
*://*/*
Host
Critical
Broad host access — the extension can read/modify content on every website.
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.

27 indicators in this extension

27 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

The free password manager extension comes with autofill & autologin including websites that support the Authenticator format.

Read the publisher’s full description

SAASPASS is a free Password Manager & Authenticator 2FA code generator with autofill & autologin capabilities. It is built with Security & Usability in mind. The SAASPASS password manager extension can autofill both your passwords AND authenticator codes enabling a smooth seamless experience and single sign-on SSO. There is NO need for a separate desktop password manager application with the SAASPASS browser extension. The password manager browser extension plugin is protected by two-factor authentication by default and includes passwordless 2FA like scanning an encrypted barcode and push login approval. The password keeper browser extension plugin is both phishing-proof and prevents man-in-the-middle attacks. The SAASPASS mobile app is available on the Apple App Store and Google Play. The iPhone and iPad version is available here: https://apps.apple.com/us/app/saaspass-authenticator-2fa-mfa/id849132027 The Android version is available here: https://play.google.com/store/apps/details?id=com.solidpass.saaspass&hl=en&gl=US You can access everything with copy/paste capabilities also from the SAASPASS web portal at: https://www.saaspass.com/sd/#/login The web portal is protected by multi-factor authentication by default, and includes passwordless MFA like scanning an encrypted barcode and push login approval. ---- Features include: Seamless sync between multiple devices The SAASPASS Password Manager comes with over 100 thousand pre-configured websites and mobile apps There is the Authenticator 2FA code generator for websites and mobile apps The SAASPASS Security Scan identifies websites and apps that have Authenticator 2FA support, and also identifies Duplicate and Weak passwords The password manager and authenticator code generator has user initiated AutoFill & AutoLogin (prevents hijacking) The password manager addon is secured with passwordless 2FA There is SSL Detection and the browser extension only Autofills HTTPS sites The password manager add-on comes with SSO & Copy to clipboard The Web Portal Access comes with SSO & Copy to clipboard The Web Portal is secured with passwordless 2FA SAASPASS has multiple passwordless 2FA support that includes Scanning Encrypted Barcodes & Push Login The 2FA on the browser extension is pinned and mitigates against Phishing and Man-in-the-Middle attacks Secure Notes - in this notes and password keeper you can store and vault all sorts of details both offline and optionally synced online with multiple devices There is a Strong Password Generator in the browser extension and mobile app SAASPASS comes with Multiple Device support and Device Management (including device removal) Tablet support (including landscape view and split screen on the iPad) Offline support Secure Backup & Restore options with SIM Swap prevention Universal Search is available for both the password manager and authenticator codes in the mobile app, web portal and browser extension Works on all platforms (Microsoft Windows, Apple Mac, Linux, iPhone, iPad, iOS and Android etc.) There is no need for a desktop application to be installed Sharing of Passwords Sharing of Authenticator (TOTP & HOTP) codes supported (available for teams and enterprises) Multiple App Lock protection options Mobile AutoFill with App Lock protection Password Manager, Authenticator & Secure Notes work with offline and online options Phishing proof logins logins from the password manager browser extension Jailbreak & Root detection HOTP/TOTP support is adjustable and comes with support of 6,7 and 8 digit codes You can integrate the password manager with 2FA products twilio authy, google authenticator, microsoft authenticator, 1password, dashlane and duo security The mobile app is available in over 30 languages - In addition to personal use, companies can also use SAASPASS for: Multi-factor authentication (MFA), Enterprise Password Manager, Single Sign-on (SSO) Shared Access Manager Share passwords Share Authenticator codes (TOTP & HOTP) with teams Share emails & applications Access Control Policies Adaptive Authentication Privileged Access Manager (PAM) Directory Services (including Microsoft Active Directory and LDAP) Endpoint Access Protection (enforce MFA on computers) Reporting & Audit Trail (internal SIEM & export to external SIEMs) Companies can sign up from the www.saaspass.com website. Companies can integrate: On-premise applications Cloud applications Hybrid applications The Identity & Access Management (IAM) of SAASPASS can be used to integrate many business and productivity applications including email and collaboration suites There is pre-built out-of-the box integration to over 100 THOUSAND applications to services like Amazon, Facebook, Dropbox, Gmail, Twitter and Linkedin. - Developers can integrate passwordless multi-factor authentication (MFA) services with RESTful API, ready code snippets in multiple languages and SDKs. More details on building two-factor authentication 2FA is available at: developer.saaspass.com - For enterprise customers there is support for hard tokens with TOTP, HOTP & FIDO U2F format and USB based Yubico Yubikey OTP. - The mobile password manager and authenticator app has app protection that includes: Biometric Authentication TouchID FaceID Pattern Invisible Pattern Scrambled Keypad Fingerprint Authentication and Verification Facial Authentication and Verification - You can import services as a CSV file from your Chrome browser or other formats from the SAASPASS web portal for services like Dashlane, Lastpass and 1Password. - The 2FA (always required) to unlock your browser extension is phishing-proof and keylogger attacks are mitigated against. There are no static credentials, like a master password to unlock the browser extension, that can be used in a replay attack. Man-in-the-middle attacks are not possible as the 2fa is pinned to the browser. This makes the SAASPASS browser extension arguably have the highest level of security possible with extreme usability. -bit Integrations of the Single Sign-on SSO solution include SAML, OIDC, RDP, VPN, okta, cyberark, onelogin, sailpoint, saviynt, simeio solutions, pingone, beyondtrust, avatier, roboform, avira, my1login, zoho vault, password boss, bitwarden, one identity, enpass, myki, nordpass, passwordstate, logmeonce, zenmate, blur, abine, lastpass, password depot, dropbox passwords, it glue, true key, x beta, norton security, microfocus, silverfort, kee, thycotic, avg, passbolt, total av, passwork, netiq, 1clickvpn, safeincloud, devolutions, steganos, remembear, keepasshelper, commonkey, aws iam, axiad, keepassxc, apple keychain, ping one, duo security, expressvpn, rapidIdentity, touch vpn, identity automation, ambius, kaseya, passly, directory services, metadata directories, Azure AD, Active Directory, LDAP and secure web based form-filling. You can even add passwordless MFA to Identity Providers (IdP) and Identity Governance solutions like idaptive, okta browser plugin, onelogin, ibm tivoli isam esso and oracle. - You can set up the team password manager and team single sign-on by signing up in the company sign up. The team password manager can be used for all password sharing needs including making the passwords visible and invisible. The admin can share both the password manager and the authenticator codes (TOTP & HOTP) as well. The password manager & authenticator codes generated can be shared on mobile devices, the web portal and the browser extension. - We have a limit of 500 login items in the personal use case for the free password manager and authenticator code generator. This is how we can offer the password manager for free for personal use while we charge companies. - The secure notes keeper is stored in an encrypted vault and works offline by default. You can turn it online and have it synced with multiple devices as well. - Keep us posted with your suggestions, feedback and ideas for improvements for the password manager and authenticator code generator. We look forward to it and always appreciate it! If you enjoy the service feel free to rate us. This helps us improve the password manager, secure notes keeper, password vault, and the authenticator code generator and our service to you. - You can learn about more features about the password safe, encrypted vault, notes keeper and you can get the SAASPASS Free Password Manager & Authenticator for Mozilla Firefox, Google Chrome, Apple Safari, Microsoft Edge and Opera from www.saaspass.com

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs
10

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

27 indicators in this extension

27 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
5.0.0
Latest
0.49 MBNot scanned—
58dd7981abfd4c2d32a79c42f462a9d91c27dbc3cbe354d3f71c88127aa7f9de
3.0.3
0.49 MBNot scanned—
cc995246a5ccce44ff9946119671b43c57acf2d63bcc35a1b3881e44dfdc584f
3.0.2
0.49 MBNot scanned—
cc995246a5ccce44ff9946119671b43c57acf2d63bcc35a1b3881e44dfdc584f
3.0.1
0.49 MBNot scanned—
cc995246a5ccce44ff9946119671b43c57acf2d63bcc35a1b3881e44dfdc584f
5.0.1
0.49 MBNot scanned—
58dd7981abfd4c2d32a79c42f462a9d91c27dbc3cbe354d3f71c88127aa7f9de
Showing 1 to 5 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

Popular in Privacy & Security