Is Discord Token Login safe?
Discord Token Login writes a URL-supplied value into Discord localStorage as the session token.
The content script runs on discord.com pages at document start, reads a hardcoded query parameter, decodes it, clears Discord localStorage, and stores the decoded value as the token. It then removes the query string and redirects to Discord's direct-message page, so opening a matching Discord URL can change the browser's Discord session token without a nonce or source check.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itSefinek - no other listings under this identity
Sefinek - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed Discord Token Login contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- discord.com
Discord Token Login sends data to discord.com. 16 other extensions we have analysed send data here.