Is ERP Auto Login - IITKGP safe?

Medium risk

ERP Auto Login - IITKGP stores saved ERP passwords and security answers in plaintext when users save them without a PIN.

If the PIN field is left empty, the popup saves the ERP password and security answers directly in chrome.storage.local instead of using its encryption path. The content script later reads those saved values and autofills the IITKGP ERP login form at erp.iitkgp.ac.in.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Siddhartha Sarkarv9.1.2Chrome Web Store
40Risk
Who publishes it

Siddhartha Sarkar - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Siddhartha Sarkar
Registered address
Dhanubhanga, Goalpara, Assam 783130, IN
Registered contact
Siddhartha Sarkar

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 9.1.2. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on erp.iitkgp.ac.in

    *://erp.iitkgp.ac.in/*

  • Store data in your browser

    storage

Updated 30 September 2026hianmedhblomknonbbmalncjjffdligl