CODEWITHSUNDEEP
google-chrome-extension
Graham
Graham

Reputation: 8151

How secure is data stored using chrome.storage.local.set

I'm storing options data in a chrome extension using chrome.storage.local.set

How secure is that data?

Can it be read easily by anyone who has access to the file it is stored in?

Upvotes: 4

Views: 1528

Answers (2)

Adam B
Adam B

Reputation: 3833

It is not secure, and per the official chrome.storage docs is stored unencrypted in the user's profile folder under their Chrome data directory. You will need to use some additional encryption if you are storing more sensitive data using these APIs.

They are stored in a LevelDB database in the following location:

C:\Users\<User>\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\<Extension id>

Upvotes: 7

Haibara Ai
Haibara Ai

Reputation: 10897

  1. It's saved in the following path (For other OS, the path is similar), can be easily accessed.

    C:\Users\<User>\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\<Extension id>

  2. Basically, since the data is saved in local machine, you can't trust it as secure, since there're tons of ways to get the data. For example, other extension/scripts may overrite chrome.storage.local.set and they may get the data first, like what Storage Area Explorer does.

Upvotes: 1

Related Questions