What the pills mean
Haven doesn't interrupt you, until something's actually wrong.
Verified and Protected are the only pills Haven shows, and each one means something specific and confirmed. When a page is actually dangerous, Haven skips the pill entirely for something you can't miss.
This is the real thing
The page matches one of the 200+ sites on Haven's protected list, banks, email providers, and other services people rely on most. This is a confirmed identity match, and it overrides every other signal Haven checks.
“Matched to Haven's protected list”
Verified, with extensions paused
The site is verified, and Haven has paused your other browser extensions on this tab while you're there, so nothing else running in your browser can read what you type. It happens on the most sensitive sites, like your bank, tax, government and healthcare sites, and your password manager keeps working. Same confirmed identity as Verified, shown in a darker green.
“Protected — the real Chase”
How it decides
Recognizing beats guessing.
If Haven already knows a site, it doesn't second-guess itself. If it doesn't, here's the process it goes through instead.
First
A confirmed match
If the page matches Haven's protected list, it's Verified (or Protected, if extensions are also paused on that page), full stop. No other signal, however alarming, can downgrade a confirmed identity match.
Next
Clear signs of danger
Outside the protected list, Haven weighs page-level signals and reputation data together. Strong, combined signals are what trigger the full-page warning, not any single flag on its own.
Otherwise
No pill at all
Most of the web isn't on Haven's protected list, and that's expected. Haven doesn't try to label every page it hasn't checked. No pill just means ordinary browsing, not a warning of any kind.
How Haven works
We'd rather protect the good ones than chase every bad one.
Two approaches, one problem. Here's why we picked ours.
The old way
Blacklists
Traditional security tools work by blacklisting sites already known to be bad. It sounds reasonable until you look at the timeline: new phishing pages appear every second, faster than any blacklist can track. A site has to be discovered, reported, and added before it does any good, and by then the attacker has often already moved the page to a new domain.
The result: always one step behind.
Haven's way
A protected list
200+sites protected
Verifying the entire internet isn't possible, so Haven doesn't try. Instead we maintain a curated list of the sites people rely on most, banks, email providers, and everyday tools where a mistake actually costs something. Every site on it is protected the moment you visit, no waiting for a report to come in. If yours isn't listed yet, you can request it be added, at no cost.
Answers to Your Questions
Get answers to commonly asked questions about Haven Verified.
Add to Chrome, it's free