Password Reuse Detector Extension Chrome

Simple Chrome extension for detecting password reuse and phishing attacks.

Latest Version

Version

0.0.4

Update

November 22, 2022

Size

95.61KiB

Developer

Password Reuse Detector Extension

This is a very simple chrome extension which detects if you are using the same password for different domains. It can protect users against password reuse and phishing attacks.

How it works:
This extensions allows you to set your corporate domain (the domain where you usually login with your personal work account) and the corresponding password.
If for some reason you'll try to use your corporate password for a different domain, the extension will detect the event and it will show a warning page. This might protect you against password reuse bad practices and even phishing attacks.

Important note: since the extension DOES NOT block any request, it might be possible that even if the extension triggered the warning page, your password could have already been sent. So consider to change your password whenever the extension triggered the warning page.

Additional note: at some time you'll need to change your password. In order to let the extension to work properly, you need to update the password in the extension's settings as well.

Source Manifest.json

{"update_url": "https://clients2.google.com/service/update2/crx", "name": "Password Reuse Detector", "version": "0.0.4", "description": "Simple Chrome extension for detecting password reuse and phishing attacks.", "manifest_version": 3, "author": "Luca Fam\u00e0", "background": { "service_worker": "background.js" }, "permissions": ["storage", "notifications"], "action":{ "default_popup": "popup.html", "default_title": "Password Reuse Detector", "default_icon": { "32":"images/fish.png" } }, "web_accessible_resources": [{ "resources": ["detected.html"], "matches": [""] }], "content_scripts": [ { "matches": [""], "all_frames": true, "js": ["buffer.js", "scrypt.js", "insideIframe-content.js", "common.js"] } ], "content_security_policy": { "extension_pages": "default-src 'self'; object-src 'self'; style-src 'self' https://cdn.jsdelivr.net 'unsafe-inline'; connect-src 'self' https://api.pwnedpasswords.com" }}