Is RoboForm Password Manager safe?

Clean risk

RoboForm Password Manager intercepts WebAuthn passkey calls on all pages and can disable the browser's built-in password manager.

The extension injects a content script into every page that replaces the native navigator.credentials API, routing passkey creation and authentication requests through RoboForm's own handlers. Separately, when the user enables the setting to turn off browser password management, the extension calls browser privacy APIs to disable Firefox's built-in password-saving and autofill features. Both behaviors are controlled by user settings and are part of the extension's core password management functionality.

Siber Systemsv9.9.9.1Firefox Add-ons
3Risk
Who publishes it

Siber Systems - no other listings under this identity, 8 shared hostnames

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Siber Systems

Shared hosts - 8 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

accounts-stage.roboform.eu
Also called by 3 other listings
accounts.roboform.eu
Also called by 3 other listings, including RoboForm
online-test.roboform.com
Also called by 3 other listings, including RoboForm
online.roboform.com
Also called by 3 other listings, including RoboForm
staging.roboform.com
Also called by 3 other listings, including RoboForm
start.roboform.com
Also called by 3 other listings
test-me.com
Also called by 3 other listings
help.roboform.com
Also called by 5 other listings, including pCloud Pass - Password manager

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 9.9.9.1. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    http://*/* and 1 more

  • Read and change your data on every secure site you visit

    https://*/*

  • Store data in your browser

    storage

  • See the address and title of every tab you have open

    tabs

  • Read and change your bookmarks

    bookmarks

  • Change your browser's privacy and security settings

    privacy

  • Watch every request your browser makes

    webRequest

  • Watch, block and rewrite every request your browser makes

    webRequestBlocking

  • See every page you navigate to, as you navigate to it

    webNavigation

  • Talk to a program installed on your computer, outside the browser's sandbox

    nativeMessaging

  • Add items to the right-click menu

    contextMenus

  • Read whatever you have copied to your clipboard

    clipboardRead

  • Write to your clipboard

    clipboardWrite

Updated 2 November 2026amo-823490