Is nos2x safe?

Medium risk

nos2x reuses signing and decryption permissions across HTTP and HTTPS pages on the same hostname.

nos2x stores approvals for private-key operations by hostname without including the URL scheme. If you permanently approve signing or decryption on an HTTPS site, an HTTP page on the same hostname can reuse that approval through the extension's page message bridge.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

fiatjafv2.5.2Chrome Web Store
40Risk
Who publishes it

fiatjaf - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
fiatjaf

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 2.5.2. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Store data in your browser

    storage

  • Act on the current tab, but only after you click the extension

    activeTab

windows
Updated 2 November 2026kpgefcfmnafjgpblomihpgmejjdanjjp