Is BeChat safe?

Low risk

BeChat uploads deleted and view-once WhatsApp Web messages to its own backend, and premium plans forward every message.

On web.whatsapp.com the extension hooks WhatsApp's internal message models and sends the content of deleted and view-once messages to apiexpress.bechat.com.br. On the premium plan with a webhook configured, it also forwards every sent and received message to the vendor's notification endpoint. Its page bridge also lets scripts running in the WhatsApp page read or replace the vendor session token.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

15Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed BeChat contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • apiexpress.bechat.com.br

    BeChat sends data to apiexpress.bechat.com.br. One other extension we have analysed sends data here.

Updated 15 October 2026oonpjnhbfkmoinhddbgomnkgimpmoplh