Is Authenticator App safe?
Authenticator App forwards autofill requests for credential fields to a localhost WebSocket using bundled AES key material.
When username, password, or one-time-code fields are focused, the extension requests autofill items and autofill data through its background script. The background script sends encrypted JSON over ws://localhost:43456 using AES parameters shipped inside the extension, covering credential-field context, form input, and URLs.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itFirstOrder - no other listings under this identity
FirstOrder - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed Authenticator App contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- localhost:43456
Authenticator App sends data to localhost:43456. Named as a recipient in this extension's own analysis.