ClickArmor is designed to detect and prevent social engineering attacks in browser 100% locally.
Users
3
+2 in 30 days
Rating
4.0 / 5
unchanged in 30 days
Ratings
3
0 in 30 days
Store rank
#287K
#236K among extensions
Version
2
updated 4 May 2026
Users
monthly, 7 months
Latest, 15 Oct 2026:3 usersMove the mouse over the chart for any month
Ratings count
monthly, 7 months
Latest, 15 Oct 2026:3 ratingsMove the mouse over the chart for any month
The Chrome Web Store rounds user counts down to the leading digit, so the user line moves in steps. The ratings count is exact and is the better signal of real adoption.
About ClickArmor
ClickArmor protects you from social engineering and phishing attacks in real time.
ClickFix Protection
ClickArmor monitors clipboard activity and analyzes page behavior locally in your browser, catching attacks at multiple stages, from the fake lure to the malicious payload reaching your clipboard.
When a threat is detected, ClickArmor can clear the clipboard and display a detailed warning.
Detects:
Fake CAPTCHA and “human verification” pages that instruct you to run commands
Fake browser update screens with simulated download progress
Obfuscated script loaders that fetch payloads from remote infrastructure
Clipboard hijacking via writeText, execCommand, and DataTransfer APIs
Hidden command payloads embedded in page elements
Multi-stage attacks that replace the page with document.write()
Homoglyph and Unicode evasion techniques, including Cyrillic lookalikes and zero-width characters
Credential Phishing Protection:
ClickArmor scans pages for credential harvesting and brand impersonation on domains that do not belong to the brand being shown.
If you land on a fake Microsoft, Google, PayPal, Adobe, or banking login page, ClickArmor can display a full-screen warning identifying the impersonated brand and the legitimate domain you should expect.
It also detects brand impersonation hosted on abused platforms such as Google Sites, Google Forms, and SharePoint, as well as AiTM-style login relay pages.
How it works:
Page-level scanning identifies social engineering signals, brand impersonation, and AiTM indicators
Clipboard hooks intercept suspicious write attempts before payloads reach your clipboard
Form analysis detects credential harvesting on unofficial domains
High-confidence threats trigger a warning banner or blocking overlay
You decide whether to leave the site, whitelist it, or continue at your own risk
Privacy first
All detection runs 100% on-device.
No telemetry.
No cloud lookups for browsing activity.
No data collection.
Your browsing stays in your browser.
Validation:
ClickArmor has been tested against:
56,000+ real-world phishing URLs from PhishTank
5,000+ ClickFix-related domains from ThreatFox