Is X Token login safe?

Clean risk

X Token login writes a user-entered X auth token into the x.com auth_token cookie.

When you enter a token in the popup while on x.com, the extension sends it to its content script and sets it as the x.com auth_token cookie. It then navigates the tab to x.com/home, so the token is used as an X login cookie rather than being sent to a separate service.

0Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.22. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • See the address and title of every tab you have open

    tabs

Where it sends data

Destinations our analysis observed X Token login contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • x.com

    X Token login sends data to x.com. 22 other extensions we have analysed send data here.

Updated 30 September 2026gceojnffehjfnkoifconnifeameehhad