Is Tuebora Quick Sign in safe?
Tuebora Quick Sign in fills stored single sign-on credentials into any page whose URL carries login=extn and an assetRef.
On every http/https page, the extension checks the URL for login=extn and assetRef parameters. If present, it asks the user's configured Tuebora tenant for the matching credentials and writes the username and password into the page's form fields. It does not check that the page belongs to the intended application, so any page that sets those parameters and has matching form fields can receive the credentials.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itsso.extensions.tuebora - no other listings under this identity
sso.extensions.tuebora - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed Tuebora Quick Sign in contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- User-configured Tuebora tenant (e.g. xanadu.tuebora.com)
Tuebora Quick Sign in sends data to User-configured Tuebora tenant (e.g. xanadu.tuebora.com). Named as a recipient in this extension's own analysis.