Is Wpplus safe?

Low risk

Wpplus copies WhatsApp Web messages in memory and sends deleted and view-once messages to its own API.

On web.whatsapp.com the extension keeps a copy of incoming messages. When a message is revoked or a view-once message arrives, it posts the stored content to the vendor's API, gated by a premium plan. A premium webhook feature can also relay each sent and received message through the vendor API, and the AI features upload chat text, audio and the user's OpenAI key to vendor endpoints.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

15Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed Wpplus contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • api.wpplus.com.br

    Wpplus sends data to api.wpplus.com.br. No other extension we have analysed sends data here.

Updated 15 October 2026lkjnakdlfddgackkljmpodeljpigbeem