SETI Protect

SETI Protect is a Chrome extension that replaces traditional password entry with continuous facial recognition, aiming to secure browser sessions against session jacking, remote desktop hacks, and phishing. It is built by Smart Eye Technology, a company specializing in biometric multifactor authentication that also incorporates fingerprint, handwriting, and voice verification. However, SETI Protect focuses solely on facial recognition as a persistent authentication layer for Chrome. The core value proposition is that once the user’s face is verified at the start of a session, the extension continuously monitors presence and identity, locking the browser if the user steps away or if an unauthorized face appears. This is a meaningful departure from one-time login methods, because many modern attacks—like session hijacking via malware or remote desktop tools—don’t steal credentials; they steal active sessions. By maintaining constant verification, SETI Protect can theoretically invalidate an attacker’s access even if they have already compromised the browser. In practice, the continuous authentication is designed to be seamless: the webcam periodically checks for the user’s face without requiring repeated manual logins. But this frictionlessness depends heavily on environmental factors. Consistent lighting, a clear view of the face, and minimal obstruction (like sunglasses or masks) are required for reliable operation. Users who work in variable lighting conditions or wear accessories that obscure facial features may experience frequent lockouts or false rejections. The extension is limited to Chrome, which restricts its utility for organizations using multiple browsers or requiring cross-platform coverage. Furthermore, no pricing information is publicly available, suggesting an enterprise licensing model rather than a consumer product. This positions SETI Protect as a specialized tool for security-conscious teams that want to add a biometric layer to browser-based workflows without disrupting existing identity infrastructure. For security professionals, the main appeal is the protection against session jacking and remote desktop attacks—threats that traditional MFA (like one-time codes) does not address because the session is already authenticated. SETI Protect essentially treats the browser session as a state that requires continuous proof of identity, not just a gate at entry. For remote workers handling sensitive data—such as financial dashboards, customer records, or internal tools—this can be a significant upgrade, especially if they work in shared or public spaces where leaving a desk momentarily could expose data. However, the privacy implications should not be glossed over. Facial data must be processed in real time, and while Smart Eye Technology claims to use advanced AI, the storage and processing of biometric information raise questions about data retention, encryption, and third-party access. The extension likely processes facial vectors locally or on secure servers, but without transparent documentation, privacy-conscious individuals should weigh the convenience against potential data exposure. For businesses evaluating SETI Protect, deployment considerations include webcam availability on employee devices, compatibility with virtual desktop environments (where the browser may not have direct camera access), and integration with existing SSO or MFA systems. The product does not appear to offer APIs or federation, so it may function as a standalone Chrome policy rather than a component of a broader zero-trust architecture. Ultimately, SETI Protect is a niche but potent tool for a specific threat model: browser-based session theft. It is not a general-purpose password manager or a full endpoint security suite. Its value is highest in environments where the browser is the primary attack surface and where users are disciplined enough to maintain the conditions required for reliable facial recognition. For those seeking a passwordless future with continuous authentication, SETI Protect offers a glimpse of that direction, but with caveats around browser lock-in, environmental sensitivity, and pricing opacity.