Edge Add-ons
48Versions
0Code reviewed

Not reviewed

No code review on record

We have not reviewed this extension’s code, so we cannot vouch for it either way. Check the permissions below to decide whether it asks for more than it needs.

Want us to read this extension's code? Ask for a review and we'll queue it.

29 indicators in this extension

29 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

Lightning Autofill, used by 23,981 people, is not yet reviewed by Extension Auditor. Its permissions mean it can read and change data on all websites and can inject scripts into pages. It was last updated in November 2025.

Lightning Autofill

Lightning Autofill Edge extension security report

ID: lkfeipbjpgibcbhhciamknhfdpjemfke

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status
Active
Version
14.24.3
Size
0.54 MB
Rating
2.9/5
Reviews
45
Users
23,981
Type
Extension
Updated
Nov 12, 2025
Category
Productivity
Price
Paid
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No
This publisherTrack record
1extension
All still listed

Publisher Contextual Analysis

Author
tohodo.com
Website
Visit
Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Users
23,981

Screenshots & videos

Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5
Screenshot 6
Screenshot 7

Install growth

Item
Type
Severity
Description
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
userScripts
Permission
Critical
This permission allows registration of arbitrary user scripts that run in a page's main world. Rated Critical because the scripts execute with full access to page JavaScript, can be updated at runtime from remote code, and bypass the isolated world that normally contains content scripts.
<all_urls>
Host
Critical
Broad host access — the extension can read/modify content on every website.
identity
Permission
High
This permission accesses Chrome identity service and user information. Rated High because it can obtain OAuth tokens, access connected accounts, and impersonate the user in authenticated service.
offscreen
Permission
High
This permission creates hidden browser documents with full DOM access. Rated High because it can run background operations invisibly, potentially executing malicious code without user awareness.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 10% increase: About:blank access enables potential sandbox escape vectors
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
Broad Content Script Access
Risk Factor
High
This extension can inject scripts into any website.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
unlimitedStorage
Permission
Medium
This permission removes storage quota restrictions. Rated Medium because it can store large amounts of user data without limits, potentially impacting browser performance and storing extensive tracking data.
About:blank Access
Risk Factor
Medium
This extension can run content scripts in about:blank pages.
alarms
Permission
Low
This permission schedules periodic tasks. Rated Low because it can only trigger events at specified times without access to sensitive data.
contextMenus
Permission
Low
This permission adds items to browser context menus. Rated Medium because it only modifies right-click menus without access to page content.
sidePanel
Permission
Low
This permission adds custom panels to the browser interface. Rated Low because it only affects browser UI elements and cannot access page content.

29 indicators in this extension

29 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

The most popular autofill extension, boosting productivity since 2010.

Read the publisher’s full description

OVERVIEW Lightning Autofill is the ultimate form-filling tool for maximum productivity and convenience. Tired of wasting time filling out forms and repeating the same tasks over and over again? Lightning Autofill transforms how you interact with online forms, handling everything from account registration to shopping cart checkout with ease! Lightning Autofill combines form filling, automation, macros, text expansion with autocompletion, text snippets, random data generation, and form recovery in one powerful tool. While the browser's built-in autofill only handles basic fields, Lightning Autofill works on complex multi-page forms. It's perfect for advanced automation like monitoring product availability or drops and auto-purchasing when in stock. BENEFITS 🚀 Boost your productivity: No more manually filling out forms—get more done in less time. 💰 Save money: Catch limited-time offers and flash sales before they sell out. 💸 Make money: Automate online sweepstakes and survey-for-gift-card sites like Crowdtap. 🔔 Never miss out: Secure reservations and appointments the instant a slot opens up. 🧠 Reduce mental fatigue: Free your mind from repetitive tasks to focus on what matters. 🤙 Reduce repetitive strain injuries: Avoid hand and wrist pain from constant typing. KEY FEATURES ⚡ Autofilling: Autofill way more form fields than the built-in autofill (text inputs, checkboxes, radio buttons, dropdown menus, multi-select lists, rich text editors, reCAPTCHAs). 🦾 Automation: Automate tasks with JavaScript and macros (click elements, trigger events, open tabs, reload pages, scrape HTML, customize page appearance, wait, and more). 🪄 Rules generator: Easily create autofill rules without coding. 🔤 Text expansion: Expand shortcodes directly or through autocomplete. 📋 Text clips: Insert boilerplate text snippets from the context menu. 🎲 Variables: Generate dynamic content, random data, and more. 🎯 Smart targeting: Find fields using simple text, regular expressions, CSS selectors, or XPaths. 🗂️ Profiles: Create, duplicate, and sort rule sets for better organization. ⌨️ Hotkeys: Execute profiles and manage rules using keyboard combos. ☁️ Cloud sync: Manage your data in Google Sheets and sync it across devices. 💾 Import/Export: Back up and restore your data locally and remotely. 🛟 Peace of mind: Recover form data in case of crashes. 🚫 Exceptions: Exclude specific pages or websites from autofill. PLANS 🆓 Free: 10 profile executions per day (sufficient for casual users) 🌟 Plus: unlimited profile executions + cloud sync (connect to Google Sheets) 💎 Pro: everything in Plus plan + JavaScript rules and variables + reCAPTCHAs Try our Plus or Pro plans risk-free with a 3-day free trial—no credit card required! FAQ  ❓ Doesn't the browser already have an autofill feature? 🅰️ Yes, but it's very limited. The browser's built-in autofill only works with address and password fields, and you still have to manually select from a dropdown menu every time. Lightning Autofill works on all form field types (except file inputs), and fills them instantly with zero clicks.  ❓ Can I automate things like clicking buttons and auto-submitting forms? 🅰️ You sure can! With JavaScript rules, Lightning Autofill can do pretty much anything that you can do manually, but much faster. Lightning fast. And it never gets tired.  ❓ Are you tracking me? 🅰️ Absolutely not! We're big on privacy ourselves, so Lightning Autofill has no Google Analytics, no tracking pixels, no cookies—nothing. Read our Privacy Policy for details. If you have other questions, our Discord and Reddit communities are ready to help. PRIVACY & SECURITY We respect your privacy. Lightning Autofill never tracks your browsing history or collects any personal information. Your data is stored locally on your device (unless you use cloud sync) and is not encrypted, so please use caution when autofilling sensitive information like passwords and credit card numbers. WHAT'S NEW [14.24.3] - Added "Execute in order" option - Added profile data to search index - Added profile and rule IDs to search index - Added ability to import only profiles - Integrated checkout into "Premium" tab - Improved server error messaging - Improved search performance - Improved modal dialog style - Improved dark themes - Updated "Theme" option logic - Moved referral code below "Manage Subscription" button - Moved import mode into its own section - Removed "Permissions popup" option - Fixed regression bug on fresh installs - Fixed quotes in News being converted to smart quotes - Fixed "Help" button not working in mobile - Fixed import bug when all rules are in "Unfiled" profile [14.18.5] - Refactored to comply with CWS policies - Optimized backend responses - Fixed Firefox installation bug - Fixed circular reference bug - Fixed bug with JS rules ending with comments - Fixed Google Forms autofill issue - Fixed infobar wrapping issue [14.17.3] - Added subscribe CTA - Improved collapsible section headings - Improved profile expiration to process at 11:59:59pm - Migrated backend (should avoid Cloudflare blocking issues) - Replaced Halving Pledge with referral program - Updated footer links - Fixed contextual help not loading - Fixed broken Type/Mode columns in Edge - Fixed issue with "Discard Changes and Continue" button [14.14.5] - Refactored for Google compliance - Updated links to lightningautofill.com domain - Fixed intermittent "Disconnect" button issue [14.14.4] - Removed Firefox for Android version (some APIs not supported) [14.14.1] - Refactored for Google compliance [v14.14.0] - Added support for autofilling Unicode escape sequences - Added blue bolt icon when manual mode is enabled - Added keyboard shortcut to open options - Added keyboard shortcut to toggle manual mode - Added support for pointer events in DISPATCH action - Improved autofilling React autocomplete components - Refactored more code to comply with Google and Mozilla policies - Fixed bolt icon sometimes not lighting up [v14.11.2] - Improved error handling - Updated footer [v14.11.0] - Fixed regression: import can fail with large files (> 400KB) - Fixed spacing glitch when hovering over Type/Mode dropdowns - Fixed usage stats not updated when deleting profiles - Fixed free quota not resetting in Firefox for macOS - Fixed autofill issue with some forms in Edge [v14.10.0] - Added keyboard shortcut to execute the active profile - Fixed broken import when data has missing profiles [v14.9.0] - Refactored more code to comply with Google and Mozilla policies - Fixed a broken API endpoint - Fixed some rules not executing after action in manual mode [v14.8.0] - Refactored code to comply with Google and Mozilla policies - Fixed fail-safe backup sometimes not saving latest changes - Fixed remote import "You have unsaved changes" bug [v14.7.3] - Removed unused fonts to reduce package size - Fixed build script - Fixed broken profile menu in side panel [v14.7.0] - Added local fail-safe backup in case of data corruption - Added support for Firefox Mobile (experimental) - Moved text expansion option out of Experimental - Improved styles when "Fluid layout" is disabled - Improved Options page styles in Firefox - Fixed link to incorrect FAQ number - Fixed broken "What's new" link in Firefox [v14.5.6] - Fixed some sites getting logged out [v14.5.5] - Fixed bug with incrementing/decrementing variables - Fixed broken manual mode (regression) [v14.5.4] - Fixed some iframes not autofilling (e.g., TinyMCE v4) - Fixed incorrect plan in icon tooltip in some cases [v14.5.2] - Added error handling for Google Sheets 50k-character limit - Fixed "Internal Server Error" after trial period ends - Fixed rules table breaking when Value contains certain text [v14.5.0] - Added 3-day free trial countdown - Added future support for removing developer mode requirement - Renamed "Manage Subscriptions" to "Manage Subscription" - Improved "Manage Subscription" to automatically sign in - Fixed a rare sync issue [v14.4.1] - Replaced Halving Pledge overlay with link to page [v14.4.0] - Improved backend integration - Fixed JavaScript variables initialization bug - Fixed edge case where Free quota wasn't reset - Fixed incorrect profile executions remaining icon tooltip - Fixed duplicate API calls - Fixed JavaScript errors from corrupt data [v14.3.0] - Added slot for sponsor link - Improved error messaging when offline [v14.2.2] - Improved field validation for actions - Fixed focusing and incorrect hint when changing Type column [v14.2.0] - Added support for Unfiled profile in AUTOFILL action - Improved JavaScript rules and variables backend - Fixed Unfiled profile executing all rules (regression) [v14.1.5] - Improved rendering of long profile list in side panel - Improved import operation - Updated Halving Pledge messaging - Updated side panel filter field tooltip - Fixed import error handling regression - Fixed iframes not loaded on some pages in Firefox - Fixed Free quota icon tooltip sometimes not resetting - Fixed bug with "Reveal password" option - Fixed JavaScript rules not working after upgrading to Pro

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs
29

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

29 indicators in this extension

29 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
11.6.0
Latest
0.31 MBNot scanned—
310a8d5d0aa4055104d6a52debc075f52e60ecd26f31c4467ad906eae6a92efb
11.7.0
0.31 MBNot scanned—
310a8d5d0aa4055104d6a52debc075f52e60ecd26f31c4467ad906eae6a92efb
11.7.5
0.31 MBNot scanned—
310a8d5d0aa4055104d6a52debc075f52e60ecd26f31c4467ad906eae6a92efb
11.7.8
0.31 MBNot scanned—
310a8d5d0aa4055104d6a52debc075f52e60ecd26f31c4467ad906eae6a92efb
11.8.0
0.31 MBNot scanned—
310a8d5d0aa4055104d6a52debc075f52e60ecd26f31c4467ad906eae6a92efb
11.8.2
0.31 MBNot scanned—
310a8d5d0aa4055104d6a52debc075f52e60ecd26f31c4467ad906eae6a92efb
11.8.4
0.31 MBNot scanned—
310a8d5d0aa4055104d6a52debc075f52e60ecd26f31c4467ad906eae6a92efb
11.8.5
0.31 MBNot scanned—
310a8d5d0aa4055104d6a52debc075f52e60ecd26f31c4467ad906eae6a92efb
11.9.0
0.31 MBNot scanned—
310a8d5d0aa4055104d6a52debc075f52e60ecd26f31c4467ad906eae6a92efb
12.0.0
N/ANot scanned—
310a8d5d0aa4055104d6a52debc075f52e60ecd26f31c4467ad906eae6a92efb
Showing 1 to 10 of 50 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

Popular in Productivity