Is Password Lock for Messenger™ safe?

Password Lock for Messenger™ stores the user's lock-screen password as an unsalted SHA-256 hash in local browser storage.

The extension lets users set a password to lock access to messenger.com. When a password is created, it is hashed using SHA-256 with no salt or key-stretching and stored in chrome.storage.local. Anyone with read access to the extension's local storage partition can recover the original password via rainbow tables or dictionary attack against the stored hash.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.