Is Google Chrome Profile Lock safe?

Medium risk

Google Chrome Profile Lock stores its profile-lock password and recovery key reversibly in Chrome synced storage.

When a user sets a lock password, the extension saves the password as Base64 and stores the recovery key in chrome.storage.sync. Chrome sync may replicate that extension storage through the user's Google account, so the lock credentials are not protected like a one-way password hash.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Ahmad Sanav1.12Chrome Web Store
40Risk
Who publishes it

Ahmad Sana - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Ahmad Sana
Registered address
House Idrish Colony, Union Bank, kanta Toli, Ranchi, Jharkhand 834001, IN
Registered contact
Sana Ahmad

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed Google Chrome Profile Lock contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • chrome.storage.sync

    Google Chrome Profile Lock sends data to chrome.storage.sync. 5 other extensions we have analysed send data here.

Updated 30 September 2026bmbbfecnhkbkealeikkbejhjcnfmdjcn