Deepl Translate And Write
✨ AI-Powered 🔍 Security Report Available View on Chrome Web StoreChrome will indicate if you already have this installed.
Overview
Stay informed, work smarter, and communicate globally without leaving your browser.
Trusted by millions across the globe, DeepL’s Language AI delivers unmatched accuracy and fluency to help you scale faster and bring clarity and efficiency into your daily work. All of that, with the highest levels of data security.
Easy to use, hard to beat!
The DeepL extension integrates seamlessly into your workflows, eliminating manual and time-consuming tasks.
No more losing context by switching tabs or apps!
With just a few clicks or by using shortcuts you can customize, the DeepL extension helps you do the following:
🌍 Translate while browsing
Do your research and stay up-to-date with information in the language of your choice. With the DeepL extension, you can:
- Translate sections on the go
- Translate entire pages (unlimited with DeepL Pro)
- Automate page translation (only with DeepL Pro)
✍️ Get translation and writing assistance for emails and documents
For your productivity, DeepL is integrated into Google Workspace with direct translation and writing assistance in Gmail, Google Docs, and Google Slides.
Read and write emails, and create and edit various documents, including papers, presentations, and reports. Adapt your work instantly to your audience, objectives, and standards:
- Translate where you work, with possible alternatives and a dictionary
- Get text corrections and suggestions for more clarity and adapt your writing style
- Apply your company, domain, or client glossaries to your documents (with DeepL Pro)
🚀 Translate and polish your comms on the spot
DeepL is also integrated into content, messaging, and social media platforms—YouTube, WhatsApp, LinkedIn, and X.
Stay in touch and exchange with your peers, partners and collaborators effectively, with instant translation and writing assistance:
- Send clear replies tailored to your goals and audience
- Engage with multilingual communities in a timely and relevant manner and extend your reach
DeepL supports translation for 30+ languages and offers writing assistance for 5+ languages with an ever-growing language portfolio.
Key information
🤝 Plans
The free version of the DeepL extension comes with character limitations.
In addition, some of our features, such as the glossary or the automated page translation, are only available to DeepL Pro and DeepL Write Pro users.
Learn more about all the advantages of DeepL Pro and DeepL Write Pro and find your plan: deepl.com/pro
🔐 Data security
The security of your data is our top priority. Per our terms and conditions at deepl.com/en/pro-license, both DeepL Pro and DeepL Write Pro don’t store or use your content to enhance our service, unless you actively agree to it, allowing you to securely translate and refine content containing personal data. However, the free version of our service may use submitted content to improve the DeepL algorithms for all users. Therefore, users shouldn't process any confidential or personal data through the free version. Learn more about our robust security measures and commitment to privacy: deepl.com/pro-data-security
Reimagine business communication with DeepL's Language AI platform
Read more about our solutions: deepl.com/en/whydeepl
Tags
Privacy Practices
Security Analysis — Deepl Translate And Write
Permissions
Code Patterns Detected
External Connections
Package Contents 231 files · 71.1MB
What This Extension Does
The Deepl Translate And Write extension provides translation services for users, allowing them to translate text while browsing or writing. It's suitable for individuals who need to communicate globally and work efficiently across languages.
Permissions Explained
- activeTabexpected: This permission allows the extension to access the current webpage you're viewing.
Technical: The activeTab permission grants access to the currently active tab's content, which can include sensitive information such as login credentials or personal data. This could potentially expose users to unauthorized access if compromised. - storageexpected: This permission allows the extension to store and retrieve data locally on your device.
Technical: The storage permission grants access to local storage, which can include sensitive information such as login credentials or personal data. This could potentially expose users to unauthorized access if compromised. - contextMenusexpected: This permission allows the extension to create custom context menus for your browser.
Technical: The contextMenus permission grants access to creating custom context menus, which can potentially be used for phishing or other malicious activities if compromised. - tabsexpected: This permission allows the extension to access and manipulate your browser tabs.
Technical: The tabs permission grants access to tab management, which can include sensitive information such as open URLs or browsing history. This could potentially expose users to unauthorized access if compromised. - scriptingexpected: This permission allows the extension to execute scripts on your behalf.
Technical: The scripting permission grants access to executing scripts, which can potentially be used for malicious activities such as code injection or data exfiltration if compromised. - declarativeNetRequestexpected: This permission allows the extension to intercept and modify network requests.
Technical: The declarativeNetRequest permission grants access to modifying network requests, which can potentially be used for malicious activities such as data exfiltration or man-in-the-middle attacks if compromised. - identityexpected: This permission allows the extension to access your browser's identity and authentication information.
Technical: The identity permission grants access to authentication information, which can potentially expose users to unauthorized access if compromised. - *://*.deepl.com/*expected: This permission allows the extension to communicate with DeepL's servers.
Technical: The *://*.deepl.com/* permission grants access to communicating with DeepL's servers, which can potentially expose users to unauthorized access if compromised. - https://api-test.deepl.com/v1/*expected: This permission allows the extension to communicate with DeepL's API servers for testing purposes.
Technical: The https://api-test.deepl.com/v1/* permission grants access to communicating with DeepL's API servers, which can potentially expose users to unauthorized access if compromised. - https://api.deepl.com/v1/*expected: This permission allows the extension to communicate with DeepL's API servers for production purposes.
Technical: The https://api.deepl.com/v1/* permission grants access to communicating with DeepL's API servers, which can potentially expose users to unauthorized access if compromised.
Your Data
The extension accesses your browsing data, including the current webpage you're viewing, and sends it to DeepL's servers for translation purposes. It also stores local data on your device.
Technical Details
Code Findings
This finding indicates that the extension uses innerHTML assignment, which can potentially be used for cross-site scripting (XSS) attacks if compromised.
Technical: The extension uses innerHTML assignment in its content script to inject HTML elements. This could potentially allow an attacker to inject malicious code if they gain access to the extension's codebase.
💡 This pattern is commonly used in legitimate extensions for injecting HTML elements into web pages.
This finding indicates that the extension uses String.fromCharCode, which can potentially be used for code obfuscation.
Technical: The extension uses String.fromCharCode to encode strings in its JavaScript files. This could potentially make it harder for security researchers to analyze the extension's behavior.
💡 This pattern is commonly used in legitimate extensions for encoding sensitive data.
This finding indicates that the extension makes XHR requests to DeepL's servers for translation purposes.
Technical: The extension makes XHR requests to various domains, including www.deepl.com and api.deepl.com. This is a normal behavior for an extension that provides online services.
💡 This pattern is commonly used in legitimate extensions for communicating with remote servers.
This finding indicates that the extension captures keystrokes, which can potentially be used for malicious activities such as keylogging or password capture.
Technical: The extension uses the tts permission to capture keystrokes. This could potentially allow an attacker to capture sensitive information such as login credentials or personal data if they gain access to the extension's codebase.
💡 This pattern is not commonly used in legitimate extensions for capturing keystrokes.
This finding indicates that the extension runs on all websites, which can potentially expose users to unauthorized access if compromised.
Technical: The extension uses the declarativeNetRequest permission to run on all websites. This could potentially allow an attacker to inject malicious code or exfiltrate sensitive data if they gain access to the extension's codebase.
💡 This pattern is commonly used in legitimate extensions for intercepting and modifying network requests.
This finding indicates that the extension has broad host permissions, which can potentially expose users to unauthorized access if compromised.
Technical: The extension uses the *://*.deepl.com/* permission to communicate with DeepL's servers. This could potentially allow an attacker to inject malicious code or exfiltrate sensitive data if they gain access to the extension's codebase.
💡 This pattern is commonly used in legitimate extensions for communicating with remote servers.
This finding indicates that the extension creates iframe elements, which can potentially be used for malicious activities such as phishing or code injection.
Technical: The extension uses the content script to create iframe elements. This could potentially allow an attacker to inject malicious code if they gain access to the extension's codebase.
💡 This pattern is commonly used in legitimate extensions for injecting HTML elements into web pages.
This finding indicates that the extension sets up event listeners, which can potentially be used for malicious activities such as code injection or data exfiltration.
Technical: The extension uses the content script to set up event listeners. This could potentially allow an attacker to inject malicious code if they gain access to the extension's codebase.
💡 This pattern is commonly used in legitimate extensions for responding to user interactions.
The Deepl Translate And Write extension provides translation services for users, but it also has some concerning findings. The extension captures keystrokes and runs on all websites, which can potentially expose users to unauthorized access if compromised. Additionally, the extension creates iframe elements and sets up event listeners, which could potentially be used for malicious activities such as code injection or data exfiltration. Users should exercise caution when installing this extension and regularly review its behavior to ensure it aligns with their expectations.
