Is ChatLabel safe?

Low risk

ChatLabel sends the WhatsApp Web login QR code and deleted or view-once message bodies to its own servers.

On web.whatsapp.com the extension captures the login QR code as an image and posts it with the session id to the ChatLabel backend. When its deleted-messages module is on, it also forwards the original text of edited, revoked and view-once messages to the same backend. Requests carry the user's ChatLabel token.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

15Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed ChatLabel contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • apiexpress.chatlabel.com

    ChatLabel sends data to apiexpress.chatlabel.com. No other extension we have analyzed sends data here.

Updated 15 October 2026gfglpagbijkicnckhhkhieemfcpjneid