Is Yoko Networks Click to Call safe?

Medium risk

Yoko Networks Click to Call supplies saved phone credentials to HTTP auth challenges from any website.

The extension registers a browser-wide authentication handler that returns the saved deskphone username and password whenever any site asks for HTTP authentication. It also sends SIP credentials to portal.yoko.us in URL query parameters and builds deskphone dialing URLs that include phone-system credentials in the HTTP request URL.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Yoko Networksv4.6.1Chrome Web Store
46Risk
Who publishes it

Yoko Networks Inc - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Yoko Networks
Declared legal entity
Yoko Networks Inc
Registered address
13031 S Choctaw Rd, Palos Heights, IL 60463, US
Registered contact
Audrius Peciukas

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 4.6.1. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    <all_urls> and 1 more

  • Read and change your data on every secure site you visit

    https://*/*

  • Store data in your browser

    storage

  • See the address and title of every tab you have open

    tabs

  • Schedule its own background tasks

    alarms

  • Add items to the right-click menu

    contextMenus

  • Watch every request your browser makes

    webRequest

  • Block and redirect the requests your browser makes

    declarativeNetRequest

  • Talk to a program installed on your computer, outside the browser's sandbox

    nativeMessaging

  • Keep running in the background while your browser is open

    background

  • Run its own code inside the pages you visit

    scripting

  • See which of your requests its blocking rules matched

    declarativeNetRequestFeedback

Where it sends data

Destinations our analysis observed Yoko Networks Click to Call contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • portal.yoko.us

    Yoko Networks Click to Call sends data to portal.yoko.us. No other extension we have analysed sends data here.

Updated 30 September 2026npgmpehjkfjicciloilfhfkaobhpobgk