Is Tolstoy - Free Screen and Video Recorder safe?

Low risk

Tolstoy lets any visited website send a login command that overwrites the extension's stored auth state.

A content script runs on every HTTP and HTTPS page and listens for a tolstoyExtension page event. When a page sends the login event, the extension passes the supplied state to the background script, which writes those keys into Chrome extension storage and copies matching Cognito access tokens into its generic accessToken field.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

19Risk
Who publishes it

Tolstoy - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
rnd
Declared legal entity
Tolstoy
Registered address
60 Hasharon, RAANANA 4335232, IL
Registered contact
Nimrod Popper

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.0.51. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    <all_urls>

  • Act on the current tab, but only after you click the extension

    activeTab

  • See the address and title of every tab you have open

    tabs

  • Capture the contents of your screen, window or a tab

    desktopCapture

  • Start, monitor and manage your downloads

    downloads

  • Store data in your browser

    storage

  • Run its own code inside the pages you visit

    scripting

  • Schedule its own background tasks

    alarms

Updated 2 November 2026lddobacmfjhpmcdapikgehklfonmnoeg