Is Norton Password Manager safe?

Clean risk

Norton Password Manager sends login domains and vault counts to Mixpanel and fetches CDN rules that call named JavaScript functions on-page.

When a user interacts with a login form, the extension captures the domain and subdomain of the login page along with a persistent client ID and transmits these as telemetry events to Mixpanel. Vault sync events additionally send aggregate counts of stored logins, passwords, addresses, credit cards, bank accounts, and notes. On startup, the extension also downloads form-handling rules from Norton's CDN; those rules can name JavaScript functions that the extension calls directly via window[functionName](), where the CDN base URL is runtime-configurable.

NortonLifeLockv8.3.1.1495Firefox Add-ons
0Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Data recipients

api.mixpanel.comstatic.nortoncdn.com
Updated 17 September 2026amo-717294