Chrome Web Store

7Versions

1Code reviewed

No malware found

In code review

Our reviewer read this extension’s code and found no malicious behaviour. Review the permissions below before installing.

What our analysis found

Disconnect, used by 400,000 people, showed no malicious code in Extension Auditor's review. Our code review reported 1 finding (1 high), led by other. Its permissions mean it can read and change data on all websites, can inject scripts into pages and can observe network requests.

Key findings

high· other —Bundled manifest includes 'webRequest' permission, but the published CWS listing summary does not. This mismatch could indicate a delayed malicious update or a listing error. The extension version under review (21.1.2) may have added the permission after the listing snapshot.

Extension is a well-known privacy tracker blocker by Disconnect, Inc. with a strong reputation (4.4 rating, 400k users, featured listing, valid privacy policy). Permissions are necessary for blocking and injecting Global Privacy Control. Only provided files show standard tracker-blocking redirects and GPC setting; no malicious logic observed. A mismatched permission (webRequest) in bundled vs published manifest is a minor discrepancy, likely due to listing sync timing, but warrants a note.

Disconnect Chrome extension security report

ID: jeoacafpbcihiomhlakheieifhpjdfeo

Supported Languages

🇺🇸English

Extension Info & Metadata

Status

Active

Version

21.1.2

Size

22.08 MB

Rating

4.4/5

Reviews

3,145

Users

400,000

Type

Extension

Updated

Mar 12, 2026

Publisher Contextual Analysis

Trusted

Author: Disconnect, Inc.
Privacy: Privacy Policy
Help: Help Center
MX records exist: No
Domain exists: No
Is disposable: No
Is role-based: Yes
Mailbox exists: No

Extensions

Active

Obsolete

Listed

Unlisted

Users

400,000

Screenshots & videos

Install growth

User Growth

Showing data from Jan 01, 2022 to Dec 31, 2022

Versions

No change in user count

Compared to 3 months ago

1 version released in this period

Rating Count

Total: 3,149 ratings

Average Rating

Current: 4.41 / 5.0-0.01

See plans

React Flow

Internal permhash`5d2796a6c7…`
No malicious matches

3 other extensions carry this fingerprint, none of them known malicious.

Withheldnot flagged
Withheldnot flagged
Withheldnot flagged

Permhash (Mandiant)`4bbed6594a…`
No malicious matches

1 other extension carries this fingerprint, none of them known malicious.

Withheldnot flagged

Network indicators

233 URLs and 5 IP literals were extracted from this version.

Item	Type	Severity	Description
scripting	Permission	Critical	This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
webRequest	Permission	Critical	This permission enables the extension to monitor and analyze all web requests made by the browser. Rated Critical because it can observe all network traffic including sensitive data, track browsing behavior, and gather authentication tokens.
declarativeNetRequest	Permission	Critical	This permission allows the extension to define rules to block, redirect, or modify network requests. Rated Critical because it can control all network traffic, potentially blocking security updates or redirecting to malicious sites.
<all_urls>	Host	Critical	Broad host access — the extension can read/modify content on every website.
webNavigation	Permission	High	This permission enables monitoring of all browser navigation events and transitions. Rated High because it can track every page visit, navigation method, and browsing pattern, potentially exposing sensitive browsing behavior and user activities.
Contextual Risk Factors	Risk Factor	High	The following context increases the overall risk:• 10% increase: Early script execution enables pre-emptive content manipulation• 10% increase: About:blank access enables potential sandbox escape vectors
Broad Host Permissions	Risk Factor	High	This extension has broad host permissions allowing it to access many or all websites.
Broad Content Script Access	Risk Factor	High	This extension can inject scripts into any website.
tabs	Permission	Medium	This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
storage	Permission	Medium	This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
declarativeNetRequestFeedback	Permission	Medium	This permission provides network request modification logs. Rated Medium because it can monitor network request changes and debug traffic modifications.
unlimitedStorage	Permission	Medium	This permission removes storage quota restrictions. Rated Medium because it can store large amounts of user data without limits, potentially impacting browser performance and storing extensive tracking data.
Early Content Script Execution	Risk Factor	Medium	This extension runs content scripts at document_start.
About:blank Access	Risk Factor	Medium	This extension can run content scripts in about:blank pages.
alarms	Permission	Low	This permission schedules periodic tasks. Rated Low because it can only trigger events at specified times without access to sensitive data.
contextMenus	Permission	Low	This permission adds items to browser context menus. Rated Medium because it only modifies right-click menus without access to page content.

1 high

The file, code excerpt and explanation behind each finding are part of the full report. No conclusion has been withheld — only the evidence. The verdict above already reflects everything found here.

Gain full insight into all external connections.

Upgrade for full visibility.

About this extension

Disconnect tracker protection makes the web more private, secure, and faster.

Read the publisher’s full description

Disconnect blocks the invisible trackers that collect your online activity and expose you to malware and identity theft. We protect you from thousands of trackers and advanced privacy threats that hide on the websites you visit. Our tracker protection lists are the most comprehensive, up to date, and intelligent form of protection available. Disconnect was named the best privacy tool several times by the New York Times, won the Innovation Award for Best Privacy and Security software at South by Southwest, was listed as one of the 100 best innovations of the year by Popular Science, and one of the best Chrome extensions by several software review websites. Disconnect is pay-what-you-want software: https://disconnect.me/support.

User reviews

3.2 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Had to turn completely disable it. Despite telling it not to function on certain financial sites, it still engaged and prevented the sites from recognizing my trusted browser. Only way to log in, without having to do 2FA every single time, was to disable it. It was showing a red icon on the affected sites, but when enabled, even with a red icon indicating it was not functioning for that particular site, it still interfered whereas disabling it entirely allowed me to log in normally on a trusted browser. Would be a great tool if it worked properly.

Rodney Wilson·12 Sept 2026

Muito bom, prático, completo, não usa muitos recursos, torna o navegador mais funcional.

Antonio Francisco Corrêa·29 Mar 2026

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs

233

IPv4

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found

No IP addresses found

Gain full insight into all external connections.

Upgrade for full visibility.

Version	Size	Verdict	Findings	Permhash
21.1.2 Latest	22.08 MB	No malware found	0	4bbed6594aa3f1747ce64fa66e62d628416f8c6dbb0d8a5bbe66ebc4db4c39c4
21.1.1	29.36 MB	Not scanned	—	3e27ae22d38787ee8bfe6be4f6f0eb871a2e85b44c09f6d37efaa93e0c36bd6e
21.1.0	28.67 MB	Not scanned	—	4bbed6594aa3f1747ce64fa66e62d628416f8c6dbb0d8a5bbe66ebc4db4c39c4
21.0.0	29.45 MB	Not scanned	—	3e27ae22d38787ee8bfe6be4f6f0eb871a2e85b44c09f6d37efaa93e0c36bd6e
20.3.1.1	0.99 MB	Not scanned	—	4f3fad9144cfd2a0a86f2557dfed93cd62fb39aabceed83802fcc02af52e234e
20.1.1	0.99 MB	Not scanned	—	4f3fad9144cfd2a0a86f2557dfed93cd62fb39aabceed83802fcc02af52e234e
21.0.1	29.46 MB	Not scanned	—	3e27ae22d38787ee8bfe6be4f6f0eb871a2e85b44c09f6d37efaa93e0c36bd6e

Showing 1 to 7 of 10 rows

Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

Popular in Privacy & Security

uBlock Origin Lite21,000,000 users
Kaspersky Protection20,000,000 users
Imprivata OneSign19,000,000 users
AdGuard AdBlocker17,000,000 users
Online Security11,000,000 users

No malware found