Is QAuth safe?

Medium risk

QAuth generates ChromeOS refresh tokens with a hardcoded signing secret and sends them to ssoone-production.appspot.com.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Plurilock security private limitedv2.0.0Chrome Web Store
45Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Updated 22 July 2026djhmcligoiljbkfdfoifmkfkganlgjgg