Chrome Web Store

129Versions

1Code reviewed

No malware found

In code review (v4.1.5.0)

Our reviewer read version 4.1.5.0 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.

What our analysis found

LockSelf - Professional Password Manager, used by 80,000 people, showed no malicious code in Extension Auditor's review. Our code review reported 1 finding (1 high), led by other. Its permissions mean it can read and change data on all websites.

Key findings

High
Other
The bundled manifest lists only 6 permissions, while the published CWS manifest summary includes 4 additional permissions: activeTab, webRequest, scripting, and alarms. Such a mismatch for the same version () could indicate a silent update or misrepresentation and should be investigated.

Analyst notes

The extension is a legitimate professional password manager (ANSSI‑certified). All observed code handles credential detection, local crypto, and first‑party API sync as expected. The ML model likely overfitted on large JS bundles (libsodium), necessary broad permissions, and network patterns normal for password managers. However, the bundled manifest omits four permissions present in the live CWS listing (webRequest, scripting, alarms, activeTab), which introduces uncertainty; the publisher’s other extension is flagged malicious, but no malicious behavior was found in this codebase.

LockSelf - Professional Password Manager Chrome extension security report

ID: keafkoopbkbjlbbedmonhnfgfciaphdb

Supported Languages

🇫🇷French

Extension Info & Metadata

Status

Active

Version

4.2.4.0

Size

40.14 MB

Rating

4.1/5

Reviews

Users

80,000

Type

Extension

Updated

Sep 25, 2026

Publisher Contextual Analysis

Author: LockSelf
Privacy: Privacy Policy
Help: Help Center
Country: FR
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: Yes
Mailbox exists: Yes
Address: 120 RUE JEAN JAURES LEVALLOIS-PERRET 92300 FR
Website: Visit

Extensions

Active

Obsolete

Listed

Unlisted

Users

81,169

Screenshots & videos

Install growth

User Growth

Showing data from Sep 10, 2023 to Sep 08, 2024

Versions

No change in user count

Compared to 3 months ago

36 versions released in this period

Rating Count

Total: 13 ratings

Average Rating

Current: 4.15 / 5.0-0.62

See plans

React Flow

Internal permhash`d207998101…`
No malicious matches

1 other extension carries this fingerprint, none of them known malicious.

Withheldnot flagged

Permhash (Mandiant)`30ee1c2792…`
No malicious matches

1 other extension carries this fingerprint, none of them known malicious.

Withheldnot flagged

Item	Type	Severity	Description
privacy	Permission	Critical	This permission allows modification of Chrome's privacy settings. Rated Critical because it can disable security features, modify network configurations, and compromise browser security settings.
<all_urls>	Host	Critical	Broad host access — the extension can read/modify content on every website.
webNavigation	Permission	High	This permission enables monitoring of all browser navigation events and transitions. Rated High because it can track every page visit, navigation method, and browsing pattern, potentially exposing sensitive browsing behavior and user activities.
identity	Permission	High	This permission accesses Chrome identity service and user information. Rated High because it can obtain OAuth tokens, access connected accounts, and impersonate the user in authenticated service.
Contextual Risk Factors	Risk Factor	High	The following context increases the overall risk: • 10% increase: Early script execution enables pre-emptive content manipulation • 25% increase: Unsafe code evaluation capabilities increase attack surface
Broad Host Permissions	Risk Factor	High	This extension has broad host permissions allowing it to access many or all websites.
Unsafe WebAssembly Execution	Risk Factor	High	This extension's CSP allows "wasm-unsafe-eval".
storage	Permission	Medium	This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
tabs	Permission	Medium	This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
Early Content Script Execution	Risk Factor	Medium	This extension runs content scripts at document_start.
alarms	Permission	Low	This permission schedules periodic tasks. Rated Low because it can only trigger events at specified times without access to sensitive data.
contextMenus	Permission	Low	This permission adds items to browser context menus. Rated Medium because it only modifies right-click menus without access to page content.

About this extension

Permet de profiter des fonctionnalités de la plateforme LockSelf.com

Read the publisher’s full description

Certifié par l'ANSSI, LockSelf est un coffre fort numérique vous permettant de : - Stocker et partager de manière sécurisée l'ensemble des mots de passe de votre entreprise - Partager de manière sécurisée des fichiers vers l'extérieur - Stocker, archiver et partager des fichiers en interne La solution peut être hébergée en cloud ou en on-premises. Sur l'hébergement cloud, nous proposons un hébergement cloud privé en France.

User reviews

4.1 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Utilisatrice de la solution dans mon cadre professionnel, je tiens à saluer le gap franchi par LockSelf. Depuis les dernières mises à jour de l'application et du plugin Chrome, l'outil est devenu d'une fluidité absolue. L'auto-remplissage est ultra-performant, rapide, et l'extension est devenue un vrai plaisir à utiliser au quotidien. Quel confort de pouvoir allier la force d'une sécurité souveraine française avec une expérience utilisateur aussi plaisante ! Je recommande sans hésiter.

Justine TOUCHARD·9 Jul 2026

Excellent

Qais Meziane·30 Mar 2026

tres utile pour gérer ses mots de passe au quotidien ! parfait

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

No network indicators were extracted from this version.

Version	Size	Verdict	Findings	Permhash
4.2.4.0 Latest	40.14 MB	Not scanned	—	30ee1c2792b494cab4a3017439d1b782d0e79a9a7f9eec106485ad21a396e4b6
4.2.3.0	40.44 MB	Not scanned	—	30ee1c2792b494cab4a3017439d1b782d0e79a9a7f9eec106485ad21a396e4b6
4.2.2.5	40.44 MB	Not scanned	—	79f59278164b8d1394ded96f0743304063a0677ad618737ffece347225b6e7be
4.2.2.0	40.42 MB	Not scanned	—	79f59278164b8d1394ded96f0743304063a0677ad618737ffece347225b6e7be
4.2.1.3	40.41 MB	Not scanned	—	79f59278164b8d1394ded96f0743304063a0677ad618737ffece347225b6e7be
4.1.0.9	3.95 MB	Not scanned	—	e9eb9b34719bb740fe669eed83583073ce3c04a840ffb920c22955ad3d714672
4.1.0.10	3.95 MB	Not scanned	—	e9eb9b34719bb740fe669eed83583073ce3c04a840ffb920c22955ad3d714672
4.2.0.0	40.37 MB	Not scanned	—	79f59278164b8d1394ded96f0743304063a0677ad618737ffece347225b6e7be
4.1.9.0	30.78 MB	Not scanned	—	79f59278164b8d1394ded96f0743304063a0677ad618737ffece347225b6e7be
4.1.8.5	30.76 MB	Not scanned	—	79f59278164b8d1394ded96f0743304063a0677ad618737ffece347225b6e7be

Showing 1 to 10 of 130 rows

Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

Popular in Privacy & Security

McAfee® WebAdvisor162,000,000 users
Imprivata Enterprise Access Management20,000,000 users
Kaspersky Protection19,000,000 users
VPN for Chrome: NordVPN proxy protection15,000,000 users
Malwarebytes Browser Guard12,000,000 users

No malware found