Is Authing Secure Authentication safe?

Low risk

Authing Secure Authentication lets any page trigger its content script to click, type, or dispatch form events.

The extension injects a content script into every frame on every site and listens for a hardcoded window message without checking the sender origin. A page can send selectors and actions through that bridge, causing the extension's script to click elements, enter text, dispatch mouse events, or relay commands into frames.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

19Risk
Who publishes it

asa - no other listings under this identity, 2 shared hostnames

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
asa

Shared hosts - 2 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

files.authing.co
Also called by 3 other listings, including Authing Secure Authentication
core.authing.cn
Also called by 6 other listings, including Authing Secure Authentication

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 0.0.15. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    *://*/*

  • Store data in your browser

    storage

  • Watch every request your browser makes

    webRequest

Updated 2 November 2026oeikeglindpddkmhcfgjadjmkbemfohm