Is CaptchaSonic: Captcha Solver & Captcha Bypass safe?

Low risk

CaptchaSonic uploads a list of all your other installed extensions to its servers along with a device fingerprint.

Once an API key is set, the extension reads the id, name, version and enabled state of every other installed extension and sends it, with an API key and device fingerprint, to CaptchaSonic at startup and on key update, at most once a day. It also posts usage analytics such as page and captcha URLs, user agent, screen size and username. The manifest declares no data collection, so the extension inventory upload is not disclosed there.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

captchaSonicv0.3.3Firefox Add-ons
19Risk
Who publishes it

captchaSonic - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
captchaSonic

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 0.3.3. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    <all_urls>

  • See the address and title of every tab you have open

    tabs

  • Store data in your browser

    storage

  • Add items to the right-click menu

    contextMenus

  • Act on the current tab, but only after you click the extension

    activeTab

  • See, disable and uninstall your other extensions, including your security ones

    management

  • Read whatever you have copied to your clipboard

    clipboardRead

  • Run its own code inside the pages you visit

    scripting

Where it sends data

Destinations our analysis observed CaptchaSonic: Captcha Solver & Captcha Bypass contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • api.captchasonic.com

    CaptchaSonic: Captcha Solver & Captcha Bypass sends data to api.captchasonic.com. One other extension we have analysed sends data here.

  • access.captchasonic.com

    CaptchaSonic: Captcha Solver & Captcha Bypass sends data to access.captchasonic.com. No other extension we have analysed sends data here.

Updated 15 October 2026amo-2886368