Is Kaspersky Password Manager safe?
Kaspersky Password Manager reads page DOM and form fields on all sites and routes credential data to the local Kaspersky KPM desktop app via native messaging.
The extension injects content scripts into every HTTP and HTTPS page to serialize the DOM structure and capture form input, including credentials, which are forwarded to a locally installed Kaspersky KPM native host (com.kaspersky.kpm.nm / com.kaspersky.kpm.nmv2). A separate MAIN-world content script intercepts WebAuthn and passkey operations on HTTPS pages, serializing challenge data and routing it through the same native messaging channel so the desktop app can handle passkey creation and sign-in. All data exchange stays on the local machine between the browser extension and the Kaspersky desktop application.
Who publishes itKaspersky Lab Switzerland GmbH - no other listings under this identity, 4 shared hostnames
Kaspersky Lab Switzerland GmbH - no other listings under this identity, 4 shared hostnames
What this publisher told the store about itself, and the other listings that told it the same thing.
Shared hosts - 4 hostnames
Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed Kaspersky Password Manager contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- com.kaspersky.kpm.nm (local native app)
Kaspersky Password Manager sends data to com.kaspersky.kpm.nm (local native app). Named as a recipient in this extension's own analysis.
- com.kaspersky.kpm.nmv2 (local native app)
Kaspersky Password Manager sends data to com.kaspersky.kpm.nmv2 (local native app). Named as a recipient in this extension's own analysis.