PassProtect is a simple Chrome extension that dramatically improves your personal security when browsing the web.
There are a lot of passwords floating around the web because they were exposed in a data breach. Threat actors can use these exposed passwords to try to compromise your account – don’t let them get in by using an exposed password!
PassProtect works by checking your password against the fabulous Have I Been Pwned? API service (https://haveibeenpwned.com/) to see whether or not the password you are using in any web login has been breached in the past. PassProtect uses ‘k-anonymity’, which ensures that your passwords are never seen, stored, or sent over the network during this checking process. You can learn more about k-anonymity by reading this excellent article: https://blog.cloudflare.com/validating-leaked-passwords-with-k-anonymity/
PassProtect is a new, experimental way to help individual users play a more active role in protecting their online accounts. We believe that by informing and guiding users to reset their credentials when necessary, we can all help make the web a safer place! <3 Randall + Okta
NOTE: This extension does not collect or store any information or passwords. You can view our privacy policy online: https://www.passprotect.io/legal/
не могу удалить его из chrome,восстанавливается каждый раз
Good product, but it would be more helpful if you could customise the message that appears. Especially for deploying to organisations or businesses.
You could make use of variables to customise the message and have this managed in a deployable setting somewhere.
Great concept and sorely needed! I wish it had a way to discern when I’m entering a one-time password for 2FA however… The 2FA use case triggers a false-positive alert.
Useful extension, but the lack of a website blacklist is annoying.
I love this thing. It’s nice to know if my password has been in a breach before.
Love this, works great! The only thing I dislike about it is it will also check on misc sites that say like “enter the last 4 of your SSN” and it always pops up to say that the last 4 of SSN “password” has been in many data breaches.
Wish it could distinct itself from actual password fields and fields like this or security question fields.
Keep up the great work! I am force-installing it across all of our clients (:
Very clever scam from “Microsoft” wanted me to give info and call them to remove threats. Hmmmm. Glad I have this notification system.
Works wonderful. Already highlighted a couple concerns for me in the first couple days of use. Hope to see some form of viewing past history of alerts, in future iterations.
Thank you for your app.I just got notification.
I am studying how to protect myself.
RSSフィードで購読している「ghacks.net」で、興味深いアプリが紹介されていました。 PassProtect warns you about insecure passwords（PassProtectは安全でないパスワードについて警告します）：Author Rating（著者評価）★ 5（満点）
https://www.ghacks.net/2018/05/28/passprotect-warns-you-about-insecure-passwords/
PassProtect は、使用しているパスワードがデータ侵害で公開（漏洩・暴露）されているかどうかをリアルタイムで簡単に発見できるブラウザプラグインです。 リアルタイム通知により、安全でないパスワードをユーザに迅速に警告し、プライバシーを侵害することなく即座に対応することができます。
PassProtect はパスワード情報をネットワーク経由で送信または保存することはありません。 それは危険なくインターネット上で機密データを安全に通信するために、k-Anonymity を使用します。
PassProtect は完全に無料でオープンソースであり、Randall Degges 氏が管理しています。 ソースを監査したい場合や、より良いやり方をするためのアイデアがある場合は、GitHub（https://github.com/OktaSecurityLabs/passprotect-js ）を開いてください。
注意：当アプリは「Google Chrome」と「Iridium」のみが正常に動作します。他の Chromium 系は動作保証がありません。インストールができても、URL（ツール）バーに「icon」を登録できないため、機能不全です。「Firefox 互換が最優先課題なので、その他については今後の研究課題」との公式回答でした（2018/06/02 時点）
no es segura
Works as described, and developed & published by well known identity and security company.
This is a clever way to automatically check your emails and passwords against the haveibeenpwned.com database!
It’s worth noting that your password is never actually sent anywhere thanks to the clever solution they came up with for checking partial password hashes. More info on that here: https://www.troyhunt.com/ive-just-launched-pwned-passwords-version-2/#cloudflareprivacyandkanonymity
When breaches occur, I always wonder if my credentials are still safe. This extension takes all the hassle out of checking that. We all know we need better passwords and this extension makes it painless and easy.
Passprotect is the extension the internet needs. Troy hunt did a great job aggregating breaches and breached account, and this extension does a fantastic job letting you know that either there was a breach of your username and password on any site.
It is so easy to use, I already recommended it to my family members so they can be safer online. That is saying something!
I wrote this extension, so I’m a bit biased — but I really like it.
One of the lame facts of life is that your credentials will eventually be breached. Maybe not today, maybe not tomorrow, but at some point? Definitely.
Security is always evolving and it’s important to know when your credentials are leaked so you can take action to update your passwords.
This extension was designed to proactively notify you whenever you enter a bad password into a login or registration form. It’ll also notify you if your credentials have been breached.
I hope you find it useful! <3