Is X Token Login safe?
X Token Login installs a user-entered token as the X auth_token cookie and opens x.com.
When the login button is clicked, the extension reads the token from its popup input, removes existing x.com cookies, and sets the entered value as the auth_token cookie for .x.com. It then navigates the active tab to https://x.com; the source does not show the token being sent to any other host.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 1.1. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on x.com
https://x.com/*
Act on the current tab, but only after you click the extension
activeTab
Read and change cookies, including the ones that keep you signed in
cookies
Where it sends data
Destinations our analysis observed X Token Login contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- x.com
X Token Login sends data to x.com. 22 other extensions we have analysed send data here.