Is TWP - Translate Web Pages safe?
TWP - Translate Web Pages ships a hardcoded Google Translate API key in its extension bundle.
The extension includes a fallback Google Translate API key embedded as an obfuscated byte array in its background script. When dynamic key retrieval fails, the extension uses this hardcoded key to send translation requests to translate-pa.googleapis.com. The key is trivially extractable from the installed extension files.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 10.2.1.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on every site you visit
<all_urls>
Store data in your browser
storage
Act on the current tab, but only after you click the extension
activeTab
Add items to the right-click menu
contextMenus
Watch every request your browser makes
webRequest
Where it sends data
Destinations our analysis observed TWP - Translate Web Pages contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- translate.googleapis.comwidely used
TWP - Translate Web Pages sends data to translate.googleapis.com. A widely used service: 92 other extensions we have analyzed send data here.
- translate-pa.googleapis.com
TWP - Translate Web Pages sends data to translate-pa.googleapis.com. 12 other extensions we have analyzed send data here.