Is Avast Online Security & Privacy safe?

Clean risk

Avast Online Security & Privacy transmits every visited URL and search result links to Avast servers for malware and phishing classification.

On each tab navigation, the extension POSTs the visited URL to urlite.ff.avast.com with tracking flags set (doNotTrack:false, saveUrlFeed:true). Search result URLs from Google, Bing, and DuckDuckGo are also collected in bulk by an injected content script and sent to the same endpoint. Additionally, the extension probes localhost ports 27275, 18821, and 7754 every two minutes to detect installed Avast or AVG desktop software.

Avast Softwarev22.12.9Chrome Web Store
0Risk
Who publishes it

Gen Digital - 16 other listings from the same operator, 1 of them carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Avast Software
Declared legal entity
Gen Digital
Registered address
60 E Rio Salado Pkwy, Tempe, AZ 85281-9124, US
Registered contact
Gen Digital Inc

Same store account

3 other listings published from this account, 5.1M+ users between them, none of them carrying a finding.

Shared hosts - 4 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

adara.com
Also called by 4 other listings, including Privci.io: Smart Personal Data Manager
datacloudoptout.oracle.com
Also called by 4 other listings, including Privci.io: Smart Personal Data Manager
optout.liveramp.com
Also called by 4 other listings, including Privci.io: Smart Personal Data Manager
support.avast.com
Also called by 7 other listings, including Avast Password Manager

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 22.12.9. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every secure site you visit

    https://*/*

  • Read and change your data on every site you visit

    http://*/*

  • See the address and title of every tab you have open

    tabs

  • Act on the current tab, but only after you click the extension

    activeTab

  • Run its own code inside the pages you visit

    scripting

  • Store data in your browser

    storage

  • Schedule its own background tasks

    alarms

  • Block and redirect the requests your browser makes

    declarativeNetRequest

  • See which of your requests its blocking rules matched

    declarativeNetRequestFeedback

Where it sends data

Destinations our analysis observed Avast Online Security & Privacy contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • urlite.ff.avast.com

    Avast Online Security & Privacy sends data to urlite.ff.avast.com. 5 other extensions we have analysed send data here.

Updated 30 September 2026gomekmidlodglbbmalcneegieacbdmki