Is PasswordPocket safe?

Low risk

PasswordPocket accepts web-page messages that can save page-supplied credentials while the extension is unlocked.

Its content script runs on all HTTP and HTTPS pages and listens for window messages without checking the sender. A page can send a save command with a URL, username, and password fields, and PasswordPocket forwards that record into its credential-save path when the user is logged in.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

developerv2.4.162Chrome Web Store
17Risk
Who publishes it

涵容科技有限公司 - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
developer
Declared legal entity
涵容科技有限公司
Registered address
三重路19-11號, 10樓, 南港區, 台北市 115, TW
Registered contact
李可涵

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 2.4.162. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    *://*/*

  • Store data in your browser

    storage

Updated 30 September 2026mkahfeefmklmbhemabnabepheopkljgp