Is Discord Token Login safe?
Discord Token Login stores Discord authentication tokens and replays them into Discord localStorage on demand.
Discord Token Login asks users to enter a Discord authentication token, validates it by sending the token to Discord's user API, and saves it in extension storage. When the user chooses a saved token, the extension injects it into a Discord tab and writes it to that site's localStorage so the browser session uses that token.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 1.0.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on discord.com
*://*.discord.com/*
Store data in your browser
storage
Act on the current tab, but only after you click the extension
activeTab
Run its own code inside the pages you visit
scripting
Where it sends data
Destinations our analysis observed Discord Token Login contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- discord.com/api/v9/users/@me
Discord Token Login sends data to discord.com/api/v9/users/@me. No other extension we have analysed sends data here.