Lock Password Next Chrome extension security report

Lock Password Next protects your Chrome browsing session with a password you set locally on your device. When locked, open tabs show a full-page unlock overlay until you enter the correct password. Lock from the extension popup, on browser startup, after a period of inactivity, or instantly with Ctrl+Shift+L (⌘+Shift+L on Mac). KEY FEATURES • Password protection — set a password once; only a secure hash is stored locally • Lock / unlock from the popup — quick access to lock now or unlock the session • Keyboard shortcut — Ctrl+Shift+L / ⌘+Shift+L to lock instantly • Lock on startup — require your password when Chrome opens • Auto-lock — optionally re-lock after N minutes of being unlocked • All websites or selected sites — lock every tab, or only hosts you choose (e.g. gmail.com, banking.example.com) • Failed-attempt limits — optional cap on wrong passwords • Actions after max failures — optionally open an Incognito window or clear browsing history and cache • Optional password hint — stored locally for your convenience • Light / Dark / System theme — for popup, settings, and lock screen HOW IT WORKS 1. Install the extension and open the popup. 2. Set your password (minimum 4 characters). 3. Enable protection in Settings. 4. Press Lock now or use Ctrl/Shift+L. Your password is never stored in plain text. Lock Password Next uses PBKDF2-SHA-256 hashing via the browser’s Web Crypto API. Settings, site lists, and password hashes are saved only in chrome.storage.local on your device. IMPORTANT Lock Password Next is a browser session lock for everyday privacy — for example when you step away from your computer. It is not operating-system-level security. Someone with full access to your machine may still disable extensions, use another Chrome profile, or access data outside the browser. PERMISSIONS The extension requests only what it needs: • storage — save your settings and password hash locally • tabs — apply and update the lock overlay across open tabs • browsingData — only if you choose “Clear browsing history” as the action after failed unlock attempts • access to websites — show the lock overlay on pages you browse No analytics. No ads. No remote code. No data sent to external servers. Open Settings from the popup for full control over lock behavior, site scope, themes, and password management.