Is Bittorent For Chrome safe?
Bittorent For Chrome sends your saved uTorrent Web UI password as a Basic-Auth header over plain HTTP and to message-supplied URLs.
The extension lets you queue torrents to a uTorrent/BitTorrent Web UI using credentials you save in its options. When adding a non-magnet torrent via an external message (ADD_TORRENT), it fetches the caller-supplied URL with your uTorrent username and password attached as a Basic-Auth header, with no restriction on which host that URL points to. It also rewrites your configured host from https to http before each request, so those same credentials are transmitted unencrypted even when you entered an https address.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 13.1.0.9. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on every site you visit
*://*/*
Store data in your browser
storage
Add items to the right-click menu
contextMenus
Act on the current tab, but only after you click the extension
activeTab
Show you desktop notifications
notifications
Where it sends data
Destinations our analysis observed Bittorrent contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- any host specified in an external ADD_TORRENT message
Bittorrent sends data to any host specified in an external ADD_TORRENT message. Named as a recipient in this extension's own analysis.
- user-configured uTorrent Web UI host
Bittorrent sends data to user-configured uTorrent Web UI host. Named as a recipient in this extension's own analysis.