DWithEase is low risk. The rating reflects signals from our analysis that have not yet been published as detailed findings.

DWithEase is published by ForkPoint.

Is DWithEase safe?

Low risk

DWithEase encrypts saved passwords with a hardcoded passphrase shared by every install unless the optional OnePass feature is enabled.

DWithEase lets Salesforce Commerce Cloud developers save Business Manager and sandbox storefront login credentials, including two-factor secrets, so it can auto-fill them later. Unless the user turns on the extension's optional 'OnePass' feature, those saved credentials are encrypted with a single passphrase that is built into the extension's own code and is identical on every installed copy, so anyone who reads the extension's source can decrypt any user's saved passwords. Enabling OnePass switches the extension to a key derived per user instead.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

ForkPointv4.9.1Firefox Add-ons

16Risk

Who publishes it

ForkPoint - no other listings under this identity, 14 shared hostnames

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher

ForkPoint

Website

dwithease.com/

Shared hosts - 14 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

cloud.dwithease.com

Also called by 2 other listings, including DWithEase

configurator.cquotient.com