Is Lightning Autofill safe?

Lightning Autofill fetches encrypted JavaScript from its servers and executes it on all pages for premium users.

For premium license holders, the extension contacts api.lightningautofill.com daily to retrieve an encrypted JavaScript payload, decrypts it using a key derived from the user's email and an RSA public key, and injects the result into every webpage via the chrome.userScripts API running in the page's own JavaScript context. Separately, when CAPTCHA solving is enabled, the extension detects audio CAPTCHA elements on any page and forwards their audio source URLs to ai.lightningautofill.com for automated transcription, then fills in the result.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.