Is Discord Token Login safe?
Discord Token Login logs Discord in from a token in a plain URL, accepted from any navigation, not only its own popup.
The extension's popup takes the Discord token you paste in and opens discord.com with the token appended to the URL as plain text. A content script running on every discord.com page then reads that token from the address bar and writes it straight into localStorage to log the browser into that account, with no check that the navigation came from the extension itself. Because the token travels in a URL, it can also end up stored in your browser history.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itLouis - 2 other listings from the same operator, none carrying a finding
Louis - 2 other listings from the same operator, none carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
2 other listings published from this account, 1k+ users between them, none of them carrying a finding.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.