Is Passwd: Team Password Manager safe?

Low risk

Passwd lets any HTTPS page request passkey assertions through its WebAuthn bridge.

Passwd injects a WebAuthn message bridge on most HTTPS pages and forwards matching page messages to its background passkey routes without checking the page origin. Those routes accept caller-supplied relying-party IDs and challenges, can open the use-passkey dialog, and can also return saved passkey metadata for arbitrary web values.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Passwd s.r.o.v2.9.2Chrome Web Store
15Risk
Who publishes it

Passwd s.r.o. - no other listings under this identity, 3 shared hostnames

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Passwd s.r.o.
Declared legal entity
Passwd s.r.o.
Registered address
Rohanské nábřeží 717/4, Prague 186 00, CZ
Registered contact
Marek Elznic

Shared hosts - 3 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

app.passwd.team
Also called by 2 other listings, including Passwd: Team Password Manager
passwd-backend-xv2nx3b2la-ez.a.run.app
Also called by 2 other listings, including Passwd: Team Password Manager
passwd.team
Also called by 2 other listings, including Passwd: Team Password Manager

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Updated 2 November 2026mnngnbmkiabhobdmeolcnjidongapoba