Is Connecteur de sécurité banque à distance safe?

Low risk

Connecteur de sécurité banque à distance bridges BPCE-group banking pages to a local certificate-signing application via native messaging.

The extension listens for messages from a set of BPCE-group bank domains and forwards signing requests to the native host fr.turbosa.itce.host installed on the user's computer. The native host performs RSA-based certificate operations and returns a signed XML response, which the extension verifies against a hardcoded public key before relaying the result back to the banking page. No user data is sent to remote servers; all communication stays between the browser and the local signing application.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Turbo S.A - Groupe BPCEv3.86Chrome Web Store
17Risk
Who publishes it

TURBO SA - 2 other listings from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Turbo S.A - Groupe BPCE
Declared legal entity
TURBO SA
Registered address
86 RUE DU DOME, BATIMENT A, BOULOGNE BILLANCOURT 92100, FR
Registered contact
Yann RAOUL

Same store account

2 other listings published from this account, 110k+ users between them, none of them carrying a finding.

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 3.86. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Talk to a program installed on your computer, outside the browser's sandbox

    nativeMessaging

Updated 30 September 2026gjibadmgilgdjabockfmgebjiapfpifp