How to Safely Store User Data for My Chrome Extension?

Consider allowing users to store their data in existing cloud services like Google Drive or Dropbox. If you don’t hold onto their data, you don’t bear the responsibility for it, which can take a lot of pressure off you as a developer.

You might want to look into software like Joplin, which uses various cloud storage options while also offering their own service for those who want it. Remember, if you don’t have their data, you can’t be held accountable for any leaks.

To keep user data safe, you should encrypt the data using a key derived from a user password that you don’t store anywhere. Perform the encryption and decryption processes directly in the browser, which means you won't have access to the data at any point. This way, you can't accidentally expose it, no matter what happens on your end.

Letting users export their configurations in a user-friendly format, like base64, can also work. This way, they can handle their own data transfers without you needing to manage that information directly, helping you sidestep a lot of potential issues.

Since you’re already storing data locally, make sure it's encrypted with a unique key known only to the user. They can then send you the encrypted data for storage. Researching tools like SQRL could be beneficial too; it ensures that even remote sites don’t have a login to compromise.