Is Telegram Multi-account safe?
Telegram Multi-account sends Telegram Web session storage to api.cloudapi.stream over WebSocket.
When you use Telegram Web, the extension reads the page's localStorage, including Telegram account authentication data, and sends it to api.cloudapi.stream about every 40 seconds. The same WebSocket connection can also write server-provided account data back into Telegram Web localStorage when switching accounts.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 4.6.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on web.telegram.org
https://web.telegram.org/*
Read and change your data on multiaccount.cloudapi.stream
https://multiaccount.cloudapi.stream/*
Act on the current tab, but only after you click the extension
activeTab
Where it sends data
Destinations our analysis observed Telegram Multi-account contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- api.cloudapi.stream
Telegram Multi-account sends data to api.cloudapi.stream. No other extension we have analysed sends data here.