Is IRCTC TatkalMate safe?

IRCTC TatkalMate stores IRCTC login and payment fields in local browser storage encrypted with a hardcoded key.

The side panel saves ticket profiles, login details, and payment fields such as card number, UPI ID, phone number, and card name into chrome.storage.local. The bundle encrypts those stored values, but the AES-GCM key is derived from a passphrase and salt shipped with the extension, so the protection does not depend on a user secret.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.