No malware found
In code review (v1.37.2)
Our reviewer read version 1.37.2 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.
What our analysis found
Proton Pass: Free Password Manager, used by 2,000,000 people, showed no malicious code in Extension Auditor's review. Its permissions mean it can inject scripts into pages and can observe network requests. It comes from a trusted publisher and was last updated in October 2026.
Analyst notes
This is Proton Pass, a legitimate password manager by Proton, a trusted privacy-focused company. The source code uses standard open-source libraries for encryption (OpenPGP, Argon2), form detection (Fathom-based), and autofill, with network requests going exclusively to Proton's own domains. Permissions like scripting, webRequest, and clipboard are required for password management features. There is a minor manifest permission discrepancy (offscreen, webNavigation, optional not fully reflected in the CWS summary), but this does not indicate malice and is likely a listing oversight. The ML model gave a low risk score (0.00), and publisher reputation is high.
Proton Pass: Free Password Manager Chrome extension security report
ID: ghmbeldphafepmbegfdlkpapadhbakde
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- Proton AG
- Privacy
- Privacy Policy
- Help
- Help Center
- Country
- CH
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- Yes
- Mailbox exists
- Yes
- Address
- Rte de la Galaise 32 Plan-les-Ouates 1228 CH
- Website
- Visit
You reached today's free scan limit (3/3 unique extensions).
Upgrade for full visibility.
Screenshots & videos
Install growth
About this extension
Free and fully encrypted password manager to keep your logins and passwords safe.
Read the publisher’s full description
Free and unlimited password manager to keep your login credentials safe and manage them directly in your browser. Get the password manager created by the former scientists who met at CERN behind Proton Mail, the world’s largest encrypted email provider. Proton Pass is open-source, end-to-end encrypted, and protected by Swiss privacy laws. Pass offers more than other free password managers and has no ads or data collection. You can use it for free forever on all your devices to create and store unlimited passwords, autofill logins, generate 2FA codes, create email aliases, secure your notes, and more. * Protect your logins and their metadata with battle-tested end-to-end encryption While many other password managers only encrypt your password, Proton Pass uses end-to-end encryption on all your stored login details (including your username, the website address, and more). * Audit Pass’s open-source code Like all other Proton services, Pass is open source and built on the principle of trust through transparency. As scientists, we know that transparency and peer review lead to better security. All Proton Pass apps are open source, meaning anyone can verify our security claims for themselves. * How can Proton Pass be free forever? We offer Pass for free because everyone deserves online privacy and security. This is possible thanks to our supportive community on paid plans. If you would like to support our work and get access to premium features, consider upgrading your plan. * Protect more than just your passwords. Join over 100 million people who have signed up for Proton’s privacy ecosystem, which includes Proton Mail, Proton Drive, Proton Calendar, Proton VPN, and more. Take back control of your privacy online with our encrypted email, calendar, file storage, and VPN. With Proton Pass, you can: - Store and auto-sync unlimited logins on unlimited devices: You can create, store, and manage your credentials from anywhere with our browser extension and apps for Android and iPhone. - Sign in faster with Proton Pass autofill: You no longer need to copy and paste your username and password. Easily and securely log in with Proton Pass autofill technology. - Avoid weak passwords: With our built-in secure password generator, you can easily generate strong, unique, and random passwords based on the security requirements for every website you sign up to. - Safely store encrypted notes: You can save private notes in Pass and access them on all your devices. - Create unique email addresses with hide-my-email aliases: Proton Pass helps you hide your personal email address with email aliases. Keep spam out of your inbox, avoid being tracked everywhere, and protect yourself from data breaches. - Make 2FA easy with our built-in authenticator: With Pass’s integrated 2FA authenticator, using 2FA is finally fast and convenient. Easily add a 2FA code for any website and use it when you log in. - Easily organize and share your sensitive data with vaults (paid feature): Manage your logins, secure notes, and email aliases with vaults. In the next version of Pass, you’ll be able to share vaults with your family, friends, or colleagues. - Quick offline access to your login data: Access your stored passwords and notes in Pass from wherever you are, even when you don’t have internet connection. - Secure your Pass account with additional security measures: Protect all your data with another layer of protection, either with TOTP or U2F/FIDO2 security keys. For more information, visit: https://proton.me/pass Learn more about Proton: https://proton.me
User reviews
Extension files
Browse and explore files within this extension package
You reached today's free scan limit (3/3 unique extensions).
Upgrade for full visibility.
No network indicators were extracted from this version.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
You reached today's free scan limit (3/3 unique extensions).
Upgrade for full visibility.
Related extensions
More from Proton AG
- Proton VPN: Fast & Secure2,000,000 users
- Proton Pass: Free Password Manager132,381 users
- Proton Pass: Free Password Manager174 users
Popular in Workflow & Planning
- Application Launcher For Drive (by Google)87,000,000 users
- AdBlock — block ads across the web65,000,000 users
- Chrome Remote Desktop38,000,000 users
- Microsoft Single Sign On35,000,000 users
- MetaMask14,000,000 users