Is PiHole Browser Extension safe?
PiHole Browser Extension sends the Pi-hole API password to its default Pi-hole HTTP admin endpoint.
The recorded claim says the extension defaults to http://pi.hole/admin and authenticates by posting the Pi-hole API password to http://pi.hole/api/auth. With that default configuration, the password and returned session token are sent over cleartext HTTP to the Pi-hole API.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itbadsgahhl - no other listings under this identity
badsgahhl - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed PiHole Browser Extension contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- pi.hole
PiHole Browser Extension sends data to pi.hole. One other extension we have analysed sends data here.