CRX aminer

Starting analysis...

Extension icon

Message Secure Send

Version 0.23 View in Chrome Web Store

Last scanned: 5 months ago | force re-scan

Extension Details

Users: 175

Context-Aware Verdict

MEDIUM
Overall Risk
Trust Factors:

The extension has very limited adoption with only 175 users and lacks basic transparency indicators such as developer information, ratings, or reviews. The absence of these trust signals makes it difficult to verify the legitimacy and reliability of the extension. The specific focus on Gmail integration suggests a targeted functionality, but the minimal user base raises questions about its maturity and testing.

Concerns:

The primary concern is the use of Manifest V2, which provides fewer security protections compared to the newer V3 standard. This older framework allows for more permissive security policies and potentially riskier extension behaviors. The permission to access mail.google.com grants the extension significant access to your Gmail account, including the ability to read, modify, and potentially extract email content. The lack of developer transparency, combined with low user adoption, creates uncertainty about the extension's true purpose and data handling practices.

Recommendations:

Consider running this extension in a separate Chrome profile to isolate it from your main browsing environment and other sensitive accounts. Before installation, verify the extension's functionality matches your specific needs for secure messaging. Monitor your Gmail account for any unusual activity after installation. Given the low user base and lack of transparency, consider looking for alternative secure messaging solutions with better established reputations and Manifest V3 compliance. If you must use this extension, regularly review its permissions and remove it if no longer needed.

Findings

MEDIUM
Older Manifest Version
This extension uses Manifest Version 2, which has fewer security restrictions than Manifest V3. Consider using extensions that have upgraded to V3.