Is Bittorent For Chrome safe?

Bittorent For Chrome sends your saved uTorrent Web UI password as a Basic-Auth header over plain HTTP and to message-supplied URLs.

The extension lets you queue torrents to a uTorrent/BitTorrent Web UI using credentials you save in its options. When adding a non-magnet torrent via an external message (ADD_TORRENT), it fetches the caller-supplied URL with your uTorrent username and password attached as a Basic-Auth header, with no restriction on which host that URL points to. It also rewrites your configured host from https to http before each request, so those same credentials are transmitted unencrypted even when you entered an https address.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.