Is BearPass safe?
BearPass lets any website submit an external-auth token that the extension sends to the configured BearPass API host.
BearPass injects a content script on every site and accepts same-window page messages that include the extension ID. When a page sends an external-auth encrypted token, the extension forwards it to the configured BearPass API host at api/external/auth/decrypt-auth-token and stores the returned auth token.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itBearPass - no other listings under this identity
BearPass - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed BearPass contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- configured BearPass API host
BearPass sends data to configured BearPass API host. Named as a recipient in this extension's own analysis.