Is Android for Web Telegram safe?

Low risk

Android for Web Telegram removes browser security headers from top-level pages and iframes on every site.

The extension uses Chrome declarative network request rules on all URLs to remove response headers including Content-Security-Policy, X-Frame-Options, HSTS, and referrer-policy protections. This happens for top-level pages and embedded frames, reducing browser-enforced protections while you browse.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

17Risk
Who publishes it

1 other listing from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Same store account

1 other listing published from this account, 1k+ users between them, none of them carrying a finding.

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.0.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    <all_urls>

  • Block and redirect the requests your browser makes

    declarativeNetRequest

Updated 2 November 2026jcgjgeepdhcgghmnalgnhiladhingahb