Is Joxi - бесплатное приложение для скриншотов safe?

Low risk

Joxi runs hotkey listeners on every website and uses Joxi token requests for sign-in and refresh flows.

Joxi injects a hotkey script on HTTP and HTTPS pages; matching key events send messages that can make the background script capture the visible tab or open crop selection. During Joxi sign-in and token refresh, the service worker posts credentials or refresh tokens with an embedded OAuth client secret to the Joxi token endpoint.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

joxiappv2.6.0Chrome Web Store
20Risk
Who publishes it

joxiapp - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
joxiapp

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 2.6.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    http://*/*

  • Read and change your data on every secure site you visit

    https://*/*

  • Read and change your data on joxi.ru

    https://joxi.ru/* and 1 more

  • Read and change your data on joxi.app

    https://joxi.app/* and 1 more

  • Read and change your data on api.joxi.app

    https://api.joxi.app/*

  • See the address and title of every tab you have open

    tabs

  • Act on the current tab, but only after you click the extension

    activeTab

  • Show you desktop notifications

    notifications

  • Add items to the right-click menu

    contextMenus

  • Store data in your browser

    storage

  • Run its own code inside the pages you visit

    scripting

  • Read and change cookies, including the ones that keep you signed in

    cookies

  • Start, monitor and manage your downloads

    downloads

Where it sends data

Destinations our analysis observed Joxi - бесплатное приложение для скриншотов contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • joxi.ru/oauth2/token

    Joxi - бесплатное приложение для скриншотов sends data to joxi.ru/oauth2/token. No other extension we have analysed sends data here.

Updated 30 September 2026cmobalecnlkpjbgffjkhgdgfbfmabmhp