Is Safeguard Enterprise Password Vault safe?

Medium risk

Safeguard Enterprise Password Vault opens its vault web UI with the bearer token embedded in the tab URL path.

When you open or edit an item in the vault web UI, the extension reads the saved login token and encodes it into the URL path for the configured vault address. That URL is opened in a browser tab at the vault's remote-token login endpoint, so the token is carried in the navigation URL rather than only in an authorization header.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

One Identityv8.2.0.21662Chrome Web Store
43Risk
Who publishes it

One Identity - 1 other listing from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
One Identity
Declared legal entity
One Identity
Registered address
20 Enterprise, Suite 100, Aliso Viejo, CA 92656, US
Registered contact
One Identity

Same operator - 1 listing

Published under a different store account, but sharing the registered address, contact or declared legal entity this one gave the store.

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 8.2.0.21662. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    http://*/*

  • Read and change your data on every secure site you visit

    https://*/*

  • Sign you in with your Google account

    identity

  • Store data in your browser

    storage

  • See the address and title of every tab you have open

    tabs

Updated 30 September 2026endlgjgkhphjmillpkdoopdchefeghfb