Is Dashlane Password Manager safe?

Low risk

Dashlane stores and autofills credentials across websites and sends device fingerprint data to a third-party analytics service at startup.

Dashlane is a password manager and digital wallet that injects autofill UI into web pages and manages saved credentials for the user. On startup, the extension sends a persistent device UUID along with browser, OS, and version metadata to PostHog analytics (eu.i.posthog.com) before the user has accepted any data-collection consent. This analytics call occurs once every 24 hours regardless of whether the user is logged in.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Dashlanev6.2644.1Firefox Add-ons
21Risk
Who publishes it

Dashlane - no other listings under this identity, 23 shared hostnames

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Dashlane

Shared hosts - 23 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

check.dashlane.com
Also called by 1 other listing
passkeys-directory.dashlane.com
Also called by 1 other listing
ripleyprd.wpengine.com
Also called by 1 other listing
sso.nitro
Also called by 1 other listing
sso.nitro.dashlane.com
Also called by 1 other listing
sso.nitrostaging.dashlane.com
Also called by 1 other listing
creditviewdashboard.com
Also called by 2 other listings
d26wo1m3adcxu5.cloudfront.net
Also called by 2 other listings
dashlane-sso.miaazienda.com
Also called by 2 other listings
dashlane-sso.micompa
Also called by 2 other listings, including Dashlane
dashlane-sso.mijnbedrijf.com
Also called by 2 other listings
dashlane-sso.mittforetag.com
Also called by 2 other listings
dashlane-sso.monentreprise.com
Also called by 2 other listings
dashlane-sso.mycompany.com
Also called by 2 other listings
dashlane.status.io
Also called by 2 other listings
dglazman.gitlab.dashlane.com
Also called by 2 other listings
docs.nestjs.com
Also called by 2 other listings, including Day.io - Time Tracker
eu.surveymonkey.com
Also called by 2 other listings
hotspotshield.com
Also called by 2 other listings, including Hotspot Shield
styx.data.dashlane.com
Also called by 2 other listings, including Dashlane
universal.dashlane.com
Also called by 2 other listings, including Dashlane
ws1.server.staging.dashlane.com
Also called by 2 other listings, including Dashlane
support.dashlane.com
Also called by 3 other listings, including JumpCloud, pCloud Pass - Password manager

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 6.2644.1. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    http://*/*

  • Read and change your data on every secure site you visit

    https://*/*

  • Add items to the right-click menu

    contextMenus

  • Read and change cookies, including the ones that keep you signed in

    cookies

  • Detect when you step away from your computer

    idle

  • Change your browser's privacy and security settings

    privacy

  • Store data in your browser

    storage

  • See the address and title of every tab you have open

    tabs

  • Store an unlimited amount of data in your browser

    unlimitedStorage

  • Run its own code inside the pages you visit

    scripting

  • Watch every request your browser makes

    webRequest

  • Watch, block and rewrite every request your browser makes

    webRequestBlocking

Where it sends data

Destinations our analysis observed Dashlane Password Manager contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • eu.i.posthog.com

    Dashlane Password Manager sends data to eu.i.posthog.com. 13 other extensions we have analyzed send data here.

Updated 2 November 2026amo-646990