Browser Lock | Lock Your Browser
Version 2.0.4 View in Chrome Web Store
Last scanned: about 3 hours ago
Extension Details
Developer:
browserlock.io
Rating:
4.7 ★
(7.1K ratings)
Users:
200,000
Context-Aware Verdict
This section provides a Claude-based AI analysis that applies additional context to the risk. Results are not guaranteed to be accurate.
HIGH
Overall Risk
Trust Factors: The extension has strong user adoption with 200,000 users and an excellent 4.7-star rating from over 7,000 reviews, indicating positive user experiences. The developer operates under a dedicated domain (browserlock.io), suggesting a focused business model around browser security tools. The high rating and substantial user base provide some confidence in the extension's legitimacy.
Concerns: The extension requests several powerful permissions that extend beyond basic browser locking functionality. The tabs permission allows comprehensive access to all browser tab information and manipulation capabilities, which could be exploited for surveillance or malicious tab management. The broad host permissions to browserlock.io domains create potential data exfiltration pathways. The combination of unlimited storage with tabs access means the extension could theoretically collect and store extensive browsing data indefinitely. The notifications and contextMenus permissions, while less critical, add to the overall permission footprint.
Recommendations: Consider running this extension in a separate Chrome profile to isolate it from sensitive browsing activities. Before installation, verify that the developer's website and privacy policy clearly explain what data is collected and how the broad permissions are used for legitimate browser locking features. Monitor the extension's behavior after installation and revoke permissions if any suspicious activity occurs. Given the high user satisfaction, the risks may be acceptable for users who prioritize browser security features over privacy concerns.
Findings
This section provides a detailed analysis of the extension's security posture, without broader context. Assumes worst-case impact.
HIGH
Broad Host Permissions
This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.
HIGH
High-Risk Permission: tabs
This extension has the tabs permission. Can access browser tab information and manipulate tabs. This could potentially be used maliciously to compromise security or privacy.
MEDIUM
Medium-Risk Permission: contextMenus
This extension has the contextMenus permission. Can add items to the context menu.
MEDIUM
Medium-Risk Permission: notifications
This extension has the notifications permission. Can show notifications.
MEDIUM
Medium-Risk Permission: storage
This extension has the storage permission. Can store data locally.
MEDIUM
Medium-Risk Permission: unlimitedStorage
This extension has the unlimitedStorage permission. Can store unlimited data locally.
Security Analysis Details
Required Permissions:
- notifications
- tabs
- windows
- storage
- unlimitedStorage
- tabGroups
- contextMenus
- idle
Optional Permissions:
- history
- background
- browsingData
Host Permissions:
- https://*.browserlock.io/*
Embedded URLs (31 total):
| https://api.browserlock.io | https://browserlock.io | |
| https://lodash.com/ | https://openjsf.org/ | |
| https://lodash.com/license | http://underscorejs.org/LICENSE | |
| https://npms.io/search?q=ponyfill. | https://x.com | |
| http://www.w3.org/2000/svg | http://www.w3.org/1999/xlink | |
| http://svgjs.com/svgjs | https://animate.style/ | |
| http://opensource.org/licenses/MIT | https://reactjs.org/docs/error-decoder.html?invariant= | |
| http://www.w3.org/XML/1998/namespace | http://www.w3.org/1998/Math/MathML | |
| http://www.w3.org/1999/xhtml | https://mantine.dev/theming/colors/#primary-color | |
| http://fb.me/use-check-prop-types | https://api.simplesvg.com | |
| https://api.unisvg.com | https://api.iconify.design | |
| https://redux.js.org/Errors?code= | https://bit.ly/3cXEKWf | |
| https://redux-toolkit.js.org/Errors?code= | https://chromewebstore.google.com/detail/browser-lock-lock-your-br/nldijlfmoepgjkjhmdiiainkjgmpdnmj/reviews/my-review | |
| https://browserlock.io/installed/welcome?extid= | https://browserlock.io/installed/update?extid= | |
| https://browserlock.io/installed/uninstall | http://jedwatson.github.io/classnames | |
| https://clients2.google.com/service/update2/crx |
Raw Manifest
{ "name": "__MSG_full_name__", "icons": { "16": "src/assets/icons/16-logo.png", "24": "src/assets/icons/24-logo.png", "48": "src/assets/icons/48-logo.png", "64": "src/assets/icons/64-logo.png", "128": "src/assets/icons/128-logo.png" }, "action": { "default_icon": "src/assets/icons/128-logo.png", "default_popup": "screen.html#/ppup", "default_title": "Browser Lock" }, "author": "humbldump", "version": "2.0.4", "commands": { "lock_browser_now_fixed": { "description": "Lock Browser With Ctrl+M", "suggested_key": { "mac": "Command+M", "default": "Ctrl+M" } } }, "background": { "type": "module", "service_worker": "service-worker-loader.js" }, "short_name": "BrowserLock", "update_url": "https://clients2.google.com/service/update2/crx", "description": "__MSG_description__", "permissions": [ "notifications", "tabs", "windows", "storage", "unlimitedStorage", "tabGroups", "contextMenus", "idle" ], "options_page": "screen.html", "default_locale": "en", "host_permissions": [ "https://*.browserlock.io/*" ], "manifest_version": 3, "optional_permissions": [ "history", "background", "browsingData" ] }
ⓘ CRXaminer has partnered with our friends at Secure Annex to provide additional findings unique to their platform.
Secure Annex also analyzes extensions from other browsers, IDEs, and can continuously monitor.
Loading Secure Annex data...
Unable to load Secure Annex data.
This extension may not yet be analyzed by Secure Annex.
Detections
0Critical
0
High
0
Medium
0
Low
0
Has Verdicts
Yes
Manifest Findings
0Critical
0
High
0
Medium
0
Low
0
Secure Annex analyzed version: -