Security Warning: High Security Risk
Toggl 2.0
ID: djchhhhpmaigfigeklaoekfgjdpmegdj
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- TogglView Profile
- Privacy
- Privacy Policy
- Country
- EE
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- Yes
- Mailbox exists
- Yes
- Address
- Tornimäe 5 Tallinn, Harjumaa 10145 EE
- Website
- Visit
Drop busy. Plan, track, focus.
Overview Track time effortlessly without leaving your browser. The Toggl extension brings accurate, real-time time tracking into the websites you already use — so you can stay focused, keep better habits, and power smarter planning across your day. Whether you work in Asana, Trello, Google Suite, or other supported tools, you can start a timer directly from the page or task you’re on. Your time logs sync instantly with Toggl, helping you stay organized and understand where your time really goes. What you can do with the Toggl Extension Start and stop timers anywhere — no need to open a separate tab. Auto-capture task names from supported tools to keep time logs clean and accurate. See your daily and weekly totals at a glance to stay on track. Use real data to power smarter planning in Toggl’s web and mobile app. How to get started 1. Click Add to Chrome 2. Log in to Toggl from the extension 3. Enable permissions for the tools you use 4. Look for the Toggl button to appear in your favorite tools 5. Start a timer — your task name and time will sync automatically About Toggl Toggl helps individuals and teams improve their productivity with simple, accurate time tracking that powers better planning. Your data syncs across web and mobile — giving you a clear picture of your day and the confidence to plan ahead. Need help? Visit our support page or reach us at [email protected].
The bundled manifest declares host_permissions ['*://*/*'] and five additional permissions (idle, contextMenus, activeTab, sidePanel, favicon) absent from the published CWS listing, which shows only ['*://*.toggl.com/*', '*://*.toggl.space/*'] for host_permissions and four base permissions. This divergence means the installed extension has programmatic access (chrome.cookies, scripting.executeScript, fetch-with-credentials) to every website, while the CWS disclosure implies only Toggl-owned domains. Broad access is functionally justified by the time-tracking-on-any-site feature, but the mismatch between declared and published permissions should be verified with the developer.
{ "permissions": [ "scripting", "storage", "cookies", "alarms", "idle", "contextMenus", "activeTab", "sidePanel", "favicon" ], "host_permissions": [ "*://*/*" ], "content_scripts": [ { "matches": [ "*://*.toggl.com/*", "*://*.toggl.space/*" ], "js": [ "content-scripts/auth.js" ] }, { "matches": [ "*://*/*" ], "js": [ "content-scripts/banner.js", "content-scripts/integration-bridge.js" ] } ]}By severity
Versions scanned
None of the 12 scanned versions have more than one unique code-review finding. Counts are unique findings that include each version.
| Extension Version | Code Review Findings |
|---|---|
| No versions with multiple unique findings. | |
Files with findings
1 distinct path — top paths by unique finding count:
- manifest.json1
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
Gain full insight into all external connections.
Upgrade for full visibility.
Gain full insight into all external connections.
Upgrade for full visibility.
Code Diff
Compare extension code between any two versions.
No comparable text files found between these versions.
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.