What is the "Password Lock for WhatsApp Web" extension and how does it work?

This extension provides an added layer of security to WhatsApp Web by obscuring the interface when locked, preventing any content from being viewed. The user must enter and confirm a password on the first use, which will protect all new instances. You can lock all WhatsApp Web instances by clicking the action button (toolbar button) or using a custom keyboard shortcut. The extension offers two protection modes: You can either unlock the application and keep it open, or you can set it to automatically lock after a specified period. Despite the added security, desktop notifications and sound alerts still work as usual.

What's new in this version?

Please check the Logs section.

Where does the extension store my password? Is it safe?

The extension uses a process called "hashing" to store your password. Hashing is a method of taking a plain text password and running it through a mathematical algorithm, which generates a unique, fixed-length string known as the hash. This extension only keeps the hash, and the password itself is not stored, which means that even if someone were to access the stored hash, they would not be able to determine the original password. The extension uses the private storage of your browser to keep this hash and other user preferences. It is important to keep your password safe, as there is no way to unlock the application if you forget it. However, if necessary, you can uninstall the extension to regain access to WhatsApp Web. Instructions on how to protect the browser extension from being removed can be found in later FAQs so that you can ensure that nobody can remove this protection layer without your permission.

How can I protect the extension from being uninstalled?

There are a few ways to prevent a Chrome extension from being uninstalled by the user:

1. Use the "force-installed" policy: If you are an administrator for a managed environment such as a school, or a business, you can use this feature to force-install an extension on Chrome devices. This policy will prevent users from disabling or uninstalling the extension. To create a "force-installed" policy, an administrator can use the Chrome management console. The administrator can create a new policy and select the extensions that should be force-installed within this management console. Once the policy is created, it can be applied to specific devices or users, or the entire organization.
2. Use a custom browser configuration: If you're deploying a customized version of Chrome, you can use a custom browser configuration to prevent the extension from being uninstalled.

Here is an example of how to configure the "force-installed" policy in the Chrome management console:

• Log in to the Chrome management console
• Go to the "Device settings" tab
• Scroll down to the "Force-installed apps and extensions" section
• Click "Manage force-installed apps"
• In the "Apps and Extensions" section, click "Add App" or "Add Extension"
• Search for the specific extension by name, or enter the ID of the extension
• Select the extension from the search results and click "Add"
• The extension will now be listed under "Force-installed apps and extensions"
• Save the settings and Apply the policy to the specific group of users or devices.

How can I access the options for this extension?

To access the options for this extension, open a new instance of WhatsApp Web, and enter your password to unlock it. Now click the preferences button. This will open a new section, containing all the configurations available for the extension.

Is it possible to set the extension to lock WhatsApp Web when my computer is inactive?

Yes, you can configure the extension to automatically lock all open instances of WhatsApp Web if your computer is not in use for a specific period. This feature is useful to prevent unauthorized access to your WhatsApp Web when you are away from your system. "Idle" refers to the state in which your computer is not being actively used or is not receiving input from the keyboard or mouse. By setting a time limit, the extension will automatically lock your WhatsApp Web, providing an extra layer of security when you're away from your device.

How can I prevent this extension to get removed by users?

Following this instruction, you can lock this extension across Firefox, Chrome, and Edge browsers, ensuring it cannot be removed or disabled without proper authorization. JSON Configuration:

{
  "policies": {
    "Extensions": {
      "Locked":  ["EXTENSION_ID"]
    }
  }
}

Firefox browser:

1. Create a policies.json file with the provided JSON content.
2. Replace "EXTENSION_ID" with "{5790fe8a-aeff-41a2-b5c1-51fbf0c01685}"
3. Place this file inside the distribution directory within the Firefox installation directory. For example, on Mac OS, the path would be /Applications/Firefox.app/Contents/Resources/distribution. For more info visit: policy-templates documentation.

Chrome browser:

1. Open the Group Policy Editor on Windows using gpedit.msc or the Registry Editor using regedit.
2. Navigate to Computer Configuration -> Administrative Templates -> Google -> Google Chrome in the Group Policy Editor.
3. Enable the "ExtensionInstallForcelist" policy
4. Click "Show", and enter the extension ID (ggeffkmohfcdjimlicjohhodmjgeccdi).
5. For non-Windows platforms, refer to the "Set app and extension policies documentation" for Chrome and use the provided JSON.

Edge browser:

1. Create a policies.json file with the provided JSON content.
2. Replace "EXTENSION_ID" with "ocjnammhdbbjjoodbjhlklahcfephlbd"
3. Follow the Microsoft Edge Policies documentation for setting app and extension policies.