Is Groupboss safe?

Groupboss stores backend auth tokens and optional saved login passwords with a hardcoded encryption passphrase.

After login, the extension saves access and refresh tokens in Chrome local storage encrypted with a passphrase that is included in the extension code. If the user enables saved credentials, it also stores the email and password the same way, making those stored values reversible from the shipped extension bundle.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.