Is Phish Alert Button safe?

Clean risk

Phish Alert Button sends the user's Gmail address, Chrome profile ID, and OS details to KnowBe4 servers on every Gmail load.

When a user loads Gmail or reports a phishing email, the extension collects the user's Google account email, Chrome profile GUID, OS name/version/architecture, browser locale, and extension version and transmits them to training.knowbe4.com. On phishing reports, the extension also fetches the full raw email content and attachments via the Gmail API and forwards them to admin-configured recipient addresses. Errors during these flows send additional details — including the reported email's subject line — to KnowBe4's Datadog logging endpoints.

KnowBe4v0.3.48Chrome Web Store
0Risk
Who publishes it

KnowBe4, Inc - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
KnowBe4
Declared legal entity
KnowBe4, Inc
Registered address
33 N Garden Ave Suite 1200, Clearwater, FL 33755-6610, US
Registered contact
KnowBe4, Inc

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 0.3.48. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on www.googleapis.com

    https://www.googleapis.com/gmail/*

  • Read and change your data on training.knowbe4.com

    https://training.knowbe4.com/

  • Read and change your data on eu.knowbe4.com

    https://eu.knowbe4.com/

  • Read and change your data on ca.knowbe4.com

    https://ca.knowbe4.com/

  • Read and change your data on www.google.com

    https://www.google.com/*

  • Read and change your data on mail.google.com

    https://mail.google.com/

  • Read and change your data on de.knowbe4.com

    https://de.knowbe4.com/

  • Read and change your data on uk.knowbe4.com

    https://uk.knowbe4.com/

  • Read and change your data on ca.pab-datadog.knowbe4.com

    https://ca.pab-datadog.knowbe4.com/

  • Read and change your data on de.pab-datadog.knowbe4.com

    https://de.pab-datadog.knowbe4.com/

  • Read and change your data on eu.pab-datadog.knowbe4.com

    https://eu.pab-datadog.knowbe4.com/

  • Read and change your data on uk.pab-datadog.knowbe4.com

    https://uk.pab-datadog.knowbe4.com/

  • Read and change your data on us.pab-datadog.knowbe4.com

    https://us.pab-datadog.knowbe4.com/

  • Store data in your browser

    storage

  • Sign you in with your Google account

    identity

  • See the email address of your Google account

    identity.email

  • Run its own code inside the pages you visit

    scripting

Where it sends data

Destinations our analysis observed Phish Alert Button contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • www.googleapis.comwidely used

    Phish Alert Button sends data to www.googleapis.com. A widely used service: 44 other extensions we have analysed send data here.

  • training.knowbe4.com

    Phish Alert Button sends data to training.knowbe4.com. No other extension we have analysed sends data here.

  • us.pab-datadog.knowbe4.com

    Phish Alert Button sends data to us.pab-datadog.knowbe4.com. No other extension we have analysed sends data here.

Updated 30 September 2026hfokdlmjeppdmpbngjpnlnijogcecaop