Is Who Am I safe?
Who Am I sends searched usernames to generated profile URLs from public username-enumeration site lists.
When you search a username from the extension UI or context menu, Who Am I downloads site definitions from WhatsMyName, Sherlock, MineSight, and Maigret. It then builds profile-check URLs containing that username and sends requests to those generated site URLs to check whether matching accounts exist.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 0.18.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on every site you visit
https://*/ and 1 more
Store an unlimited amount of data in your browser
unlimitedStorage
Store data in your browser
storage
Add items to the right-click menu
contextMenus
Where it sends data
Destinations our analysis observed Who Am I contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- raw.githubusercontent.comwidely used
Who Am I sends data to raw.githubusercontent.com. A widely used service: 26 other extensions we have analysed send data here.
- generated profile URLs from Maigret
Who Am I sends data to generated profile URLs from Maigret. Named as a recipient in this extension's own analysis.
- generated profile URLs from MineSight
Who Am I sends data to generated profile URLs from MineSight. Named as a recipient in this extension's own analysis.
- generated profile URLs from Sherlock
Who Am I sends data to generated profile URLs from Sherlock. Named as a recipient in this extension's own analysis.
- generated profile URLs from WhatsMyName
Who Am I sends data to generated profile URLs from WhatsMyName. Named as a recipient in this extension's own analysis.