Is Discord Token Login safe?
Discord Token Login sends the Discord token you type into it to discord.com as a plain, unencoded URL parameter.
When you submit a token in the extension's popup, it opens a new tab at https://discord.com?discordtoken=<your token>, placing the token directly and unencoded in the page URL. A content script on discord.com then reads the token back out of the URL and stores it in the page's localStorage before cleaning up the address bar, but by that point the token has already traveled in the outbound request and can be recorded in browser history.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itoxyinc - no other listings under this identity
oxyinc - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed Discord Token Login contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- discord.com
Discord Token Login sends data to discord.com. 21 other extensions we have analyzed send data here.