Is Snowflake safe?

Clean risk

Runs a Snowflake proxy that helps censored users connect to the Internet through Tor.

This extension lets your browser act as an entry point for Snowflake when it is installed and enabled. A green snowflake icon indicates that a censored user is connecting through the extension; their visible browsing IP address matches their Tor exit node, not yours. The extension requests storage permission, which can be used to save extension settings or state.

The Tor ProjectFirefox Add-ons
0Risk
Who publishes it

The Tor Project - no other listings under this identity, 8 shared hostnames

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
The Tor Project

Shared hosts - 8 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

anonticket.onionize.space
Also called by 1 other listing: Snowflake
forum.torproject.netorg
Also called by 1 other listing
forum.torproject.org
Also called by 1 other listing
gitlab.onionize.space
Also called by 1 other listing
snowflake-broker.torproject.net
Also called by 1 other listing: Snowflake
snowflake.torproject.org
Also called by 1 other listing: Snowflake
support.torproject.org
Also called by 1 other listing: Snowflake
forum.torproject.net
Also called by 6 other listings, including Vagabond: Manga Theme with Musashi quotes.

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed Snowflake contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • Tor Project

    Snowflake sends data to Tor Project. Named as a recipient by 1 other extensions we have analysed.

Updated 15 October 2026amo-2299025