How secure is data stored using chrome.storage.local.set

Question

I'm storing options data in a chrome extension using chrome.storage.local.set

How secure is that data?

Can it be read easily by anyone who has access to the file it is stored in?

Answer 1

It is not secure, and per the official chrome.storage docs is stored unencrypted in the user's profile folder under their Chrome data directory. You will need to use some additional encryption if you are storing more sensitive data using these APIs.

They are stored in a LevelDB database in the following location:

C:\Users\<User>\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\<Extension id>