XoN-PassPower

XoN-PassPower

ID: pellcbigddocfdhekikapnhdkdffdage

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Active
Version
0.0.1
Size
0.90 MB
Rating
0.0/5
Reviews
0
Users
3
Type
Extension
Updated
Aug 6, 2018
Category
Workflow & planning
Price
Free
Featured
No
Visibility
Unlisted
Mature
No
By Google
No
Trusted
Yes

Publisher Contextual Analysis

Trusted
Author
xposedornot.comView Profile
Website
Visit
Total Extensions
1
Active
1
Obsolete
0
Listed
0
Unlisted
1
Total Users
3
Screenshot 1
Screenshot 2
Screenshot 3

Captcha for passwords. Check how safe is your password with XposedOrNot.

XoN-PassPower What is PassPower? PassPower is a Chrome extension which detects and notifies you of exposed and breached passwords immediately if you use an unsafe password. PassPower will continuously monitor for exposed passwords and alerts you to avoid such compromised passwords. Lets say, you enter a password in one of the web sites.Immediately this password is securely hashed and anonymously checked against our public XoN-PassPower API (https://xposedornot.com/api_doc), whether this password has been breached and exposed in previous security breaches. Based on API feedback, you will be informed of the breach status and recommendations will be given for changing them to minimize risk. Feel free to read password creation tips at: https://www.devaonbreaches.com/2018/05/basic-hygiene-precautions-for-better.html ## How to Use XoN-PassPower There is no configuration needed other than the basic installation . Please install XoN-PassPower from Chrome Webstore and start benefiting. ## Why use XoN-PassPower ? XoN-PassPower has one of the largest collection of real time passwords exposed in previous security breaches. The collection currently contains approximately 850 million passwords and is providing this as a service to all those who want to check the security posture of their passwords. Public search-able website is available at : https://XposedOrNot.com for folks who want to check the passwords directly instead of extensions. ## How secure is my password ? XoN-PassPower makes use of Keccak-512 (SHA3) hashing algorithm for securely transmitting anonymized and partial hashes for validation. Since we make use of Keccak-512, the first 10 characters of the hash is checked and results returned by API over through secure communication channel for high reliability. The complete source code of this application is hosted in Github for easy reference and review.Feel free to review and provide your suggestions/inputs. Kindly let me know your feedback and any other suggestion to further improvise this.

Item
Type
Severity
Description
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 15% increase: Older manifest version lacks modern security controls
Older Manifest Version
Risk Factor
Medium
This extension uses Manifest Version 2
URLs
11
IPv4
0
IPv6
0

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.

www.xposedornot.com/api/v1/pass/anon/https://www.xposedornot.com/api/v1/pass/anon/
github.com/emn178/js-sha3%7Dhttps://github.com/emn178/js-sha3}
clients2.google.com/service/update2/crxhttps://clients2.google.com/service/update2/crx
github.com/DevaOnBreaches/PassPower-Chrome/blob/master/pics/demo.gifhttps://github.com/DevaOnBreaches/PassPower-Chrome/blob/master/pics/demo.gif
twitter.com/devaonbreacheshttps://twitter.com/devaonbreaches
xposedornot.com/api_dochttps://xposedornot.com/api_doc
www.devaonbreaches.com/2018/05/basic-hygiene-precautions-for-better.htmlhttps://www.devaonbreaches.com/2018/05/basic-hygiene-precautions-for-better.html
chrome.google.com/webstore/detail/XoN-PassPower/https://chrome.google.com/webstore/detail/XoN-PassPower/
xposedornot.com-https://XposedOrNot.com
github.com/DevaOnBreaches/PassPower-Chrome/issueshttps://github.com/DevaOnBreaches/PassPower-Chrome/issues
Showing 1 to 10 of 20 rows
Rows per page:

Gain full insight into all external connections.

Upgrade for full visibility.

No IP addresses found
Version
Size
Is Malicious
Findings
Permhash
0.0.1
Latest
0.90 MB
Benign
—N/A
Showing 1 to 1 of 10 rows
Rows per page:

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.