Is Free Password Manager & Authenticator & SSO safe?
Password Manager is medium risk. When you use the extension's OAuth login flow, the extension sends your browser user-agent with the authentication request to SAASPASS. That user-agent can reveal browser and operating-system details alongside the login attempt.
Who publishes itSAASPASS - no other listings under this identity
SAASPASS - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
Browser user-agent sent during SAASPASS authentication.
When you use the extension's OAuth login flow, the extension sends your browser user-agent with the authentication request to SAASPASS.
That user-agent can reveal browser and operating-system details alongside the login attempt.
- Severity
- Medium unwanted
- Type
- Unexpected
- CWE
- CWE-200
- Source
- Dynamic sandbox
The user starts the OAuth login flow.
The extension sends the browser user-agent as part of the authentication request.
- Browser request headersMozilla/5.0 (illustrative)
Headers can include browser context used to associate the login request with a specific browser environment.
Dynamic analysis confirmed that the OAuth token request included the browser user-agent value.
What it can do
Permissions this extension asks for, as declared in version 5.0.1. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on every site you visit
*://*/*
Store data in your browser
storage
See the address and title of every tab you have open
tabs