Is C2 Password safe?

Clean risk

C2 Password reads form credentials on all sites, auto-fills stored logins, and disables Chrome's built-in password saving.

The extension injects a content script on every website to detect username and password fields, reads their values, and sends them to the background for vault storage and autofill. On HTTP Basic/Digest auth challenges, it silently supplies stored credentials without per-request user confirmation. It also disables Chrome's native password-saving and credit-card autofill on startup.

Synology.comv3.0.0Chrome Web Store
0Risk
Who publishes it

群暉科技 - 3 other listings from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Synology.com
Declared legal entity
群暉科技
Registered address
遠東路 1 號九樓, 板橋區, 新北市 22063, TW
Registered contact
江政翰

Same store account

3 other listings published from this account, 360k+ users between them, none of them carrying a finding.

Shared hosts - 8 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

c2.synology.com
Also called by 1 other listing: C2 Password
profile.c2.c2go.dev
Also called by 1 other listing: C2 Password
profile.c2.synology.com
Also called by 1 other listing: C2 Password
profile.c2test.synology.com
Also called by 1 other listing: C2 Password
sy.to
Also called by 2 other listings, including Synology Image Assistant Extension
webmail.aol.com
Also called by 2 other listings
kb.synology.com
Also called by 3 other listings, including Download Station (client for Synology NAS)
synology.com
Also called by 5 other listings, including Synology Browser Notification

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Updated 30 September 2026kfmlopbepahlcjbkfnnklglgibbopkbk