Chrome Web StoreNo malware found
In code review (v0.21.0)
Our reviewer read version 0.21.0 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.
What our analysis found
Toggl, used by 20,000 people, showed no malicious code in Extension Auditor's review. Our code review reported 1 finding (1 high), led by other. It comes from a publisher with 2 extensions and was last updated in October 2026.
Key findings
- High
Other
The bundled manifest declares host_permissions ['*://*/*'] and five additional permissions (idle, contextMenus, activeTab, sidePanel, favicon) absent from the published CWS listing, which shows only ['*://*.[domain withheld]', '*://*.[domain withheld]'] for host_permissions and four base permissions. This divergence means the installed extension has programmatic access (chrome.cookies, scripting.executeScript, fetch-with-credentials) to every website, while the CWS disclosure implies only Toggl-owned domains. Broad access is functionally justified by the time-tracking-on-any-site feature, but the mismatch between declared and published permissions should be verified with the developer.
Analyst notes
All network destinations found in resolve exclusively to Toggl's own domains ([domain withheld], [domain withheld], [domain withheld]) — no third-party exfiltration observed. Content script behavior in is limited to DOM attribute watching and chrome.runtime.sendMessage (internal messaging only), consistent with bridging timer data from third-party productivity tools to the extension's side panel, which is the product's stated purpose. The ML model's high obfuscation counters (js_hex_obfuscation: 35432, js_exclamation: 25021) map directly to standard minified React bundle output and are not intentional anti-analysis; the single notable anomaly is a manifest mismatch where the bundled manifest declares broader permissions than the published CWS listing.
Toggl Chrome extension security report
ID: djchhhhpmaigfigeklaoekfgjdpmegdj
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- Toggl
- Privacy
- Privacy Policy
- Country
- EE
- MX records exist
- No
- Domain exists
- No
- Is disposable
- No
- Is role-based
- Yes
- Mailbox exists
- No
- Address
- Tornimäe 5 Tallinn, Harjumaa 10145 EE
- Website
- Visit
Screenshots & videos
Install growth
No Security Analysis Available
Security analysis has not been performed for this extension version yet.
About this extension
Drop busy. Plan, track, focus.
Read the publisher’s full description
Overview Track time effortlessly without leaving your browser. The Toggl extension brings accurate, real-time time tracking into the websites you already use — so you can stay focused, keep better habits, and power smarter planning across your day. Whether you work in Asana, Trello, Google Suite, or other supported tools, you can start a timer directly from the page or task you’re on. Your time logs sync instantly with Toggl, helping you stay organized and understand where your time really goes. What you can do with the Toggl Extension Start and stop timers anywhere — no need to open a separate tab. Auto-capture task names from supported tools to keep time logs clean and accurate. See your daily and weekly totals at a glance to stay on track. Use real data to power smarter planning in Toggl’s web and mobile app. How to get started 1. Click Add to Chrome 2. Log in to Toggl from the extension 3. Enable permissions for the tools you use 4. Look for the Toggl button to appear in your favorite tools 5. Start a timer — your task name and time will sync automatically About Toggl Toggl helps individuals and teams improve their productivity with simple, accurate time tracking that powers better planning. Your data syncs across web and mobile — giving you a clear picture of your day and the confidence to plan ahead. Need help? Visit our support page or reach us at support@toggl.com.
User reviews
Extension files
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.
No network indicators were extracted from this version.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
Gain full insight into all external connections.
Upgrade for full visibility.
Related extensions
More from Toggl
- Make My Day by Toggl137 users
Popular in Workflow & Planning
- Adobe Acrobat: PDF edit, convert, sign tools350,000,000 users
- Application Launcher For Drive (by Google)101,000,000 users
- AdBlock — block ads across the web65,000,000 users
- Chrome Remote Desktop41,000,000 users
- Adblock Plus - free ad blocker40,000,000 users