Chrome Web Store Verified

Total Password

by [email protected] · 20.0K users · 2.6 rating
04c20d91-7a6e-5c07-a41b-022babfd0d7c | v1.2.1
0/ 100
MINIMAL risk
Analyst verdict
No high-risk signal observed

Based on the RiskyPlugins AI security review of the observed evidence.

Analysis record

Analysed
11 months ago
Version
v1.2.1
Artifact
SHA256 429…C07
Source
Findings (non-IoC)

No Findings

All security checks passed

Publisher Evidence

Limited evidence

[email protected]

Publisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.

Chrome does not expose the same publisher verification data as IDE stores, so this score is deliberately conservative.

57
Noisy-finding weight
x1.00
Publisher domain
totalav.com
Observed
Store verification signal
Limited signal
Limited
Extension portfolio
7
Portfolio

12 evidence rows available.

No Threats Detected

This extension passed all security checks

AI Security Report

AI Security Review

Evidence context: threat category none; evidence quality moderate.

The Total Password extension has a large number of code-smell findings, primarily driven by YARA rule matches. However, these matches are related to postinstall scripts and file manipulation, which could be part of the extension's legitimate functionality as a password manager. The extension's manifest declares the 'tabs' permission, which is potentially sensitive but necessary for its intended purpose. Notably, there are no malware signatures or IoC matches that would indicate malicious behavior. The developer name is provided, and the extension has a significant user count. A skeptic might argue that the numerous YARA rule matches indicate potential malicious activity, but given the context of a password manager and the lack of concrete evidence, this seems unlikely. The strongest counterargument to the verdict would be the presence of postinstall scripts, which could potentially be used for malicious purposes. However, without more specific evidence of malicious intent or behavior, it's reasonable to conclude that these scripts are part of the extension's normal operation.

Key Reasons

  • No malware signatures or IoC matches
  • YARA rule matches related to postinstall scripts and file manipulation
  • Manifest declares 'tabs' permission, which is potentially sensitive but necessary
  • Developer name is provided, and the extension has a significant user count

False Positive Considerations

  • YARA code-smell rules
  • IoC extractor garbage

Reviewed 2026-05-23; recommended action: no action; model confidence 80%.

About This Extension

Total Password is the solution for protecting your online identity. Safely store all of your passwords, credit card information and identities in an encrypted vault, which you can access within seconds, making it easier to keep your online accounts safe. When it comes to security, we have you covered. Hackers are regularly attacking major websites to try and steal email addresses and passwords that are signed up to access those websites. The moment they get hold of them, they try them on hundreds of other websites too - within a matter of seconds, they can see if the exposed email addresses and passwords work on popular social media or email websites. Total Password is your first line of defense against this. We can put a stop to this identity theft threat. Each time you sign up to a website, and create a password, Total Password can generate a completely random, unique, long and unguessable one for you. We then store it securely for you, and automatically use it to log you in when you next visit the website. The only password you need to remember is the master - this provides access to all your unique passwords for each and every website. You can sync your Total Password account across all of your devices, meaning you don’t need to worry about forgetting a password again. Already using a password manager? No problem! You can easily import stored passwords from browsers or standalone password managers. Check out all of our features below: Secure, Encrypted storage Passwords added to Total Password are securely stored in an encrypted cloud. Rest assured we utilize the Advanced Encryption Standard (AES) with a key size of 256 bits (AES-256). In simple terms, this means no person or machine could decrypt data stored in Total Password. Unique Password Generator With a single click Total Password can generate a secure and unique password for you with as many characters as you choose. It is so important to utilize the password generator, as opposed to choosing ones that you can remember. Words, and even words with letters replaced with numbers are inherently insecure, easily guessed and susceptible to brute force attacks. Avoid identity theft, use Total Password’s Password Generator. Automatic sync between devices Using Total Password to set unique passwords for each and every website means you need them on all your devices. It’s available as an extension on all major browsers as well as an app for iPhone, iPad and Android devices. If you add a new password on desktop, rest assured it will sync across to be available on mobile, or vice versa. Your up to date encrypted storage of websites, logins, passwords, credit cards and secure notes is available on all your devices. Two-factor authentication Two-factor, or 2FA, is the next level in security. What this means is that there are 2 factors to access your passwords, the first being your master password and the 2nd being a one-time code sent to your mobile device the moment you try to login. By enabling 2FA, this means even if your master password was guessed, an intruder wouldn’t be able to access your passwords, as they wouldn’t have your mobile device for the 2nd factor authorisation. Security Reports Stay up to date with password and data breaches. Using our Security Report feature, you can check all of your passwords against breaches worldwide and change them to a new, secure password quickly. Remote logout Within Total Password you can see all the devices and browsers you’re logged into. You have full control to remove any devices with a single click, meaning you needn’t worry if you’ve left yourself logged in on a shared computer. We collect your IP address on initial installation in order to allocate your free trial access without requiring any personal information. You will only be required to provide personal details such as your name, email address & payment credentials should you wish to activate a premium subscription. Further details of both our terms & privacy policies can be found below: Terms: https://www.totalpassword.com/terms Privacy: https://www.totalpassword.com/privacy Further details can be found on on pricing page https://www.totalpassword.com/pricing Total Password will not store or log your data, your privacy is our priority. This service is sold by Total Security Limited.

Frequently Asked Questions