Is MightyText - SMS from PC & Text from Computer safe?

Low risk

MightyText exposes notification settings to any website that embeds its web-accessible helper page.

The extension makes crx-wake-up.html available to all websites, and that page reads selected notification settings from extension local storage when loaded with the mt-webapp or reminders-app client hash. It sends those settings to the parent page with postMessage and also accepts a hash event that asks the background worker to reload the extension.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

MightyTextv25.9.4Chrome Web Store
15Risk
Who publishes it

OpenPhone Inc - 1 other listing from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
MightyText
Declared legal entity
OpenPhone Inc
Registered address
3964 Rivermark Plaza, Suite 254, Santa Clara, CA 95054, US
Registered contact
MightyText

Same store account

1 other listing published from this account, 60k+ users between them, none of them carrying a finding.

Shared hosts - 1 hostname

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

pubnub.a.ssl.fastly.net
Also called by 2 other listings, including ClassroomGo - AI無邊際 (老師)

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 25.7.4. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to. The current listed version is 25.9.4, which we have not unpacked yet.

  • Read and change your data on textyserver.appspot.com

    https://textyserver.appspot.com/*

  • Read and change your data on textyapp.com

    http://*.textyapp.com/* and 1 more

  • Store an unlimited amount of data in your browser

    unlimitedStorage

  • Add items to the right-click menu

    contextMenus

  • See the address and title of every tab you have open

    tabs

  • Show you desktop notifications

    notifications

  • Run its own code inside the pages you visit

    scripting

  • Act on the current tab, but only after you click the extension

    activeTab

  • Store data in your browser

    storage

  • Detect when you step away from your computer

    idle

  • Run hidden pages in the background

    offscreen

  • Read information about your displays

    system.display

Where it sends data

Destinations our analysis observed MightyText SMS contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • parent page embedding crx-wake-up.html

    MightyText SMS sends data to parent page embedding crx-wake-up.html. Named as a recipient in this extension's own analysis.

Updated 30 September 2026dkfhfaphfkopdgpbfkebjfcblcafcmpi