Is PhishCatch safe?

Clean risk

PhishCatch reports password-reuse and page-DOM phishing matches to a configured PhishCatch server.

PhishCatch runs on all pages and watches password entry and page content so it can compare them with locally stored enterprise password and DOM hashes. When it detects a configured password-reuse or DOM-hash phishing match, it posts an alert containing the page URL, referrer or username details when available, and a client identifier to the configured PhishCatch server.

PhishCatch Developersv1.00Chrome Web Store
1Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.00. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    http://*/*

  • Read and change your data on every secure site you visit

    https://*/*

  • Store data in your browser

    storage

  • Show you desktop notifications

    notifications

  • Schedule its own background tasks

    alarms

Updated 30 September 2026leaokngbendkdlpkjcibolehghopokja