Is OysterVPN Browser Extension safe?
OysterVPN answers every HTTP authentication prompt on any site with the user's saved account email and password.
The extension registers a blocking handler on all URLs that replies to any HTTP auth challenge with the OysterVPN login credentials, with no check that the challenge came from the VPN proxy. The credentials are also kept in plain text in browser storage. A website that issues a Basic auth challenge could receive them.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itOysterVPN - no other listings under this identity
OysterVPN - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 1.0.3. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on every site you visit
<all_urls>
Read and change your data on oystervpn.com
*://oystervpn.com/*
Watch every request your browser makes
webRequest
Watch, block and rewrite every request your browser makes
webRequestBlocking
Block and redirect the requests your browser makes
declarativeNetRequest
Store an unlimited amount of data in your browser
unlimitedStorage
Store data in your browser
storage
Route all of your browsing through a server of its choosing
proxy
Change your browser's privacy and security settings
privacy