Chrome Web Store
2Versions
0Code reviewed

Not reviewed

No code review on record

We have not reviewed this extension’s code, so we cannot vouch for it either way. Check the permissions below to decide whether it asks for more than it needs.

Want us to read this extension's code? Ask for a review and we'll queue it.

465 indicators in this extension

465 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

Total Password, used by 20,000 people, is not yet reviewed by Extension Auditor. Its permissions mean it can read and change data on all websites. It comes from a trusted publisher and was last updated in February 2024.

Total Password

Total Password Chrome extension security report

ID: njimencmbpfibibelblbbabiffimoajp

Supported Languages

🇩🇰Danish
🇳🇱Dutch
🇺🇸English
🇫🇷French
🇩🇪German
🇮🇹Italian
🇳🇴Norwegian
🇵🇱Polish
🇪🇸Spanish
🇸🇪Swedish
🇹🇷Turkish

Extension Info & Metadata

Status
Active
Version
1.2.1
Size
4.36 MB
Rating
2.3/5
Reviews
60
Users
20,000
Type
Extension
Updated
Feb 11, 2024
Category
Workflow & planning
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
1extension
All still listed

Publisher Contextual Analysis

Trusted
Author
totalpassword.com
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
Yes
Mailbox exists
Yes
Website
Visit
Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Users
20,000

Screenshots & videos

Screenshot 1
Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5

Install growth

Item
Type
Severity
Description
<all_urls>
Host
Critical
Broad host access — the extension can read/modify content on every website.
browsingData
Permission
High
This permission clears browsing data, history, and redis. Rated High because it can destroy evidence of malicious activity, clear security logs, and modify browser state.
cookies
Permission
High
This permission provides full access to read and modify browser cookies. Rated High because it can steal session tokens, modify authentication cookies, and compromise accounts across websites.
clipboardWrite
Permission
High
This permission allows modification of clipboard content. Rated High because it can inject malicious content into the clipboard, modify copied passwords, and manipulate copied data.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 10% increase: Early script execution enables pre-emptive content manipulation• 25% increase: Unsafe code evaluation capabilities increase attack surface
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
Broad Content Script Access
Risk Factor
High
This extension can inject scripts into any website.
Unsafe WebAssembly Execution
Risk Factor
High
This extension's CSP allows "wasm-unsafe-eval".
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
activeTab
Permission
Medium
This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
unlimitedStorage
Permission
Medium
This permission removes storage quota restrictions. Rated Medium because it can store large amounts of user data without limits, potentially impacting browser performance and storing extensive tracking data.
Early Content Script Execution
Risk Factor
Medium
This extension runs content scripts at document_start.
bookmarks
Permission
Low
This permission manages browser bookmarks and folders. Rated Low because it can only modify bookmark data, which is not sensitive and changes are visible to users.

465 indicators in this extension

465 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

Store your passwords safely and securely - Total Password makes life easier!

Read the publisher’s full description

Total Password is the solution for protecting your online identity. Safely store all of your passwords, credit card information and identities in an encrypted vault, which you can access within seconds, making it easier to keep your online accounts safe. When it comes to security, we have you covered. Hackers are regularly attacking major websites to try and steal email addresses and passwords that are signed up to access those websites. The moment they get hold of them, they try them on hundreds of other websites too - within a matter of seconds, they can see if the exposed email addresses and passwords work on popular social media or email websites. Total Password is your first line of defense against this. We can put a stop to this identity theft threat. Each time you sign up to a website, and create a password, Total Password can generate a completely random, unique, long and unguessable one for you. We then store it securely for you, and automatically use it to log you in when you next visit the website. The only password you need to remember is the master - this provides access to all your unique passwords for each and every website. You can sync your Total Password account across all of your devices, meaning you don’t need to worry about forgetting a password again. Already using a password manager? No problem! You can easily import stored passwords from browsers or standalone password managers. Check out all of our features below: Secure, Encrypted storage Passwords added to Total Password are securely stored in an encrypted cloud. Rest assured we utilize the Advanced Encryption Standard (AES) with a key size of 256 bits (AES-256). In simple terms, this means no person or machine could decrypt data stored in Total Password. Unique Password Generator With a single click Total Password can generate a secure and unique password for you with as many characters as you choose. It is so important to utilize the password generator, as opposed to choosing ones that you can remember. Words, and even words with letters replaced with numbers are inherently insecure, easily guessed and susceptible to brute force attacks. Avoid identity theft, use Total Password’s Password Generator. Automatic sync between devices Using Total Password to set unique passwords for each and every website means you need them on all your devices. It’s available as an extension on all major browsers as well as an app for iPhone, iPad and Android devices. If you add a new password on desktop, rest assured it will sync across to be available on mobile, or vice versa. Your up to date encrypted storage of websites, logins, passwords, credit cards and secure notes is available on all your devices. Two-factor authentication Two-factor, or 2FA, is the next level in security. What this means is that there are 2 factors to access your passwords, the first being your master password and the 2nd being a one-time code sent to your mobile device the moment you try to login. By enabling 2FA, this means even if your master password was guessed, an intruder wouldn’t be able to access your passwords, as they wouldn’t have your mobile device for the 2nd factor authorisation. Security Reports Stay up to date with password and data breaches. Using our Security Report feature, you can check all of your passwords against breaches worldwide and change them to a new, secure password quickly. Remote logout Within Total Password you can see all the devices and browsers you’re logged into. You have full control to remove any devices with a single click, meaning you needn’t worry if you’ve left yourself logged in on a shared computer. We collect your IP address on initial installation in order to allocate your free trial access without requiring any personal information. You will only be required to provide personal details such as your name, email address & payment credentials should you wish to activate a premium subscription. Further details of both our terms & privacy policies can be found below: Terms: https://www.totalpassword.com/terms Privacy: https://www.totalpassword.com/privacy Further details can be found on on pricing page https://www.totalpassword.com/pricing Total Password will not store or log your data, your privacy is our priority. This service is sold by Total Security Limited.

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs
115
IPv4
4

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

465 indicators in this extension

465 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
1.0.0
Latest
4.77 MBNot scanned—
f18576e3c13e3535573be0067a870002abe891bd3bb5e282809124edc18b4e8f
1.2.1
4.36 MBNot scanned—
1bb9bab4c9a660fd33d989b420a9e833e21543cc3d1244d821235b02aef52be6
Showing 1 to 2 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.