Chrome Extension Security Hardening

I already have a Manifest V3 Chrome extension in production; what I need now is a solid security layer that lives partly on my server and partly inside the existing codebase. My hosting plan is Hostinger Premium, so anything you build must run smoothly there without extra server upgrades. Scope of work • Server-side licence / integrity check: every time the extension starts it should phone home and get a green light before enabling its main features. • Combined tamper detection + code obfuscation: the local script should verify its own hash (or similar) against a value served from my backend and keep the core logic unreadable to a casual attacker. • Remote kill switch: an admin web panel (protected login) where I can flip a toggle and instantly disable the extension for all users; once disabled, the extension must refuse to run and can show a friendly “service unavailable” notice. Manual control from the panel is essential—automated triggers are nice but not required right now. Tech preferences Hostinger allows PHP, Node.js and Python; I am open to whichever stack you feel delivers the fastest, most maintainable solution on shared hosting. Just keep RAM/CPU usage lightweight. Acceptance criteria 1. Extension successfully validates against the server on startup and blocks if validation fails. 2. Code passes a manual attempt at unpacking/minifying reversal (reasonable effort). 3. Kill switch change in the admin panel propagates within 5 minutes to active users. 4. Clear setup notes so I can redeploy or migrate the backend myself. Deliver the updated extension source, backend files, a concise README and a quick demo video of the kill switch in action.

Project ID: 40565409