Chrome extension · v1.0 · Designed for company-managed chrome devices
Embedded Files
Stop passwords from being readable on screen
Stop passwords from being readable on screen
Password Reveal Shield finds and disables "show password" controls across the sites your team visits — closing off shoulder-surfing and accidental exposure during screen shares.
Runs entirely in-browser. Password values and webpage data are not logged, stored, or transmitted by the extension.
No data collected, ever Works on any http/https site Managed via enterprise policy No analytics or trackers
Built for company-managed devices
Built for company-managed devices
A quiet, background control — not another tool your team has to think
about.
Works everywhere
Works everywhere
Detects common reveal-control patterns across the wide range of implementations sites use, rather than a fixed list of domains.
Administrator controls
Administrator controls
IT can push exempt domains, extra detection patterns (useful for non-English "show password" wording), and a master on/off switch via Chrome enterprise policy — no rebuild or reinstall needed. This configuration is the only thing the extension's storage permission is used for.
Central deployment
Central deployment
Install, update, configure, or remove the extension across managed devices at any time, without end-user action.
Easy to report edge cases
Easy to report edge cases
If a site's reveal control slips through, or an unrelated control gets caught by mistake, your security team can adjust the detection rules or exemption list — no need to disable the extension entirely.
Access and Permissions
Access and Permissions
The extension uses two types of browser access:
Access to page content on http/https sites
Access to page content on http/https sites
The content script runs on HTTP and HTTPS webpages so it can identify password fields and password-reveal controls. It inspects page structure, attributes, and relevant visible text locally. It does not read, copy, store, or transmit password values.
The content script runs on HTTP and HTTPS webpages so it can identify password fields and password-reveal controls. It inspects page structure, attributes, and relevant visible text locally. It does not read, copy, store, or transmit password values.
Managed Storage
Managed Storage
The extension uses Chrome's managed storage API only to read configuration provided by an administrator, such as exempt domains, additional detection patterns, and the enable/disable setting. The extension does not write user data to local or synced Chrome storage.
The extension uses Chrome's managed storage API only to read configuration provided by an administrator, such as exempt domains, additional detection patterns, and the enable/disable setting. The extension does not write user data to local or synced Chrome storage.
Page updated
Report abuse