---
type: Article
title: "Chrome Extensions Stealing Passwords: How to Check Yours"
description: "Chrome extensions just got caught — 108 of them quietly stole Google logins, history, and personal data from 20,000 users. How to audit yours in five minutes."
resource: https://amyfaychandler.com/108-chrome-extensions-just-got-caught-stealing-passwords-heres-how-to-check-yours/
tags: [108-chrome-extensions-just-got-caught-stealing-passwords-heres-how-to-check-yours]
---

[Retail Tidbit](https://amyfaychandler.com/category/morning-retail-tidbit/)

# 108 Chrome Extensions Just Got Caught Stealing Passwords. Here’s How to Check Yours.

	By[AmyFay Chandler](https://wordpress-1600709-6279960.cloudwaysapps.com)
						April 15, 2026July 31, 2026

A security team just discovered 108 Chrome browser extensions — from five different publishers — that were quietly stealing Google login credentials, browsing history, and personal data from roughly 20,000 users. These weren’t sketchy-looking downloads. They were ad blockers, QR code tools, emoji keyboards — the kind of thing you install once and forget about.

That “forget about” part is the problem.

Every Chrome extension you install gets permissions. Some just need to read the page you’re on. Others ask for access to your cookies, your login sessions, your browsing history across every site you visit. A QR code generator doesn’t need your Google password. But if you clicked “allow” three years ago, it has whatever you gave it — and you’d never know if the publisher sold out, got hacked, or was sketchy from the start.

Here’s your one thing this morning. Open Chrome. Type chrome://extensions/ in the address bar. Look at what’s there. Anything you don’t recognize? Remove it. Anything you installed years ago and haven’t touched since? Remove it. Anything that asks for permissions that don’t match what it actually does — a coupon clipper that wants access to your camera, a color picker that reads your cookies — remove it.

I just audited my own this morning. Thirteen extensions. Two had more access than they needed. Both are off now.

Your store’s POS login, your vendor portals, your bank — they all live in that browser. An extension with the right permissions can see all of it. Five minutes of cleanup is worth it.

xoxo, ❤️ AmyFay

What’s happening in the world. What it means for your store. Monday through Thursday, from AmyFay Chandler. More in [Weekly Retail Tidbits](https://amyfaychandler.com/category/weekly-retail-tidbits/) every Friday.

		[AmyFay Chandler](https://amyfaychandler.com/author/amyfay/)

I’m AmyFay Chandler, a Knoxville-based wholesale sales rep serving independent retailers in Tennessee and Kentucky through Tango Showroom. I also represent Sweet Tree Jewelry and Caroline B Cook nationwide. Before I became a rep, I built two T-shirt lines, ran my own retail business, bought home and gift for Elder’s Ace Hardware, and worked with Werner Frank. I have been the maker, buyer, retailer, rep, and person at the register, so I evaluate every line from the store floor first.

I write the Morning Retail Tidbit and [Friday Retail Tidbits](https://amyfaychandler.com/category/friday-retail-tidbits/) to help local retailers buy smarter, merchandise with intention, and keep their stores valuable.

## You Might Also Like

								- Retail Tidbit

### Handmade Just Became a Luxury Category

	ByAmyFay Chandler
						April 9, 2026July 31, 2026

		A phrase is picking up steam in the business world this week: “AI-free is the new organic.” The idea is simple — as AI-generated products, images, and content flood every corner of the market, anything made by actual human hands starts to command a premium. Not a small one. Investors and trend watchers are comparing…

				Read More Handmade Just Became a Luxury CategoryContinue
- Retail Tidbit

### The Relationship Isn’t Yours. It’s the Platform’s.

	ByAmyFay Chandler
						April 20, 2026July 31, 2026

		I was reading something this morning about AI companies fighting over who gets to keep the six months of context they’ve built on you — how you write, what you know, every question you’ve ever asked them — and it hit me that every independent retailer I know is living that same story and doesn’t…

				Read More The Relationship Isn’t Yours. It’s the Platform’s.Continue
- Retail Tidbit

### What Your Business Email Address Says About You

	ByAmyFay Chandler
						June 17, 2026July 31, 2026

		I kept getting emails blocked and bounced — so I asked my AI assistant why. What it told me about Yahoo, AOL, Hotmail, Gmail, and your own domain is worth every shop owner’s two minutes.

				Read More What Your Business Email Address Says About YouContinue
- Retail Tidbit

### The One Thing AI Still Can’t Do (And You Do Every Day)

	ByAmyFay Chandler
						May 12, 2026July 31, 2026

		Tacit knowledge — what your team notices in conversation — is your store’s moat. Here’s how to capture it before it evaporates.

				Re