Smallpdf—edit Convert Com Chrome extension icon

Smallpdf—edit Convert Com

✨ AI-Powered 🔍 Security Report Available
👥 2M+ users
📦 v0.23.18
💾 1.14MiB
📅 2026-02-20
View on Chrome Web Store

Chrome will indicate if you already have this installed.

Blocks your PDF editing needs with Smallpdf – edit Convert Com, a user-friendly browser-based solution that lets you compress, convert, merge, chat to, split, e-sign, and edit PDF files with ease, benefiting professionals and individuals looking for a hassle-free way to manage their digital documents.

Overview

Power up your productivity by adding the Chrome extension to your browser. Gain instant access to a suite of useful tools to work with PDFs online when you open a PDF in your browser—including our AI-powered assistant. You can also summarize your PDFs from Google Scholar.

Compress your PDFs and convert PDF to Office with the Smallpdf Chrome Extension. You can also edit, split, merge, organize, and e-sign your PDF files—for free. Smallpdf is the first and only PDF software you’ll love, trusted by over 2.4 billion people since 2013.

Quick access to our free online PDF tools to:
- Edit PDF
- Compress PDF
- Convert PDF to Word
- Convert PDF to Excel
- Convert PDF to PPT
- Convert PDF to image (JPG)
- Merge PDFs
- Split PDF
- Sign PDF
- Extract PDF pages
- Chat to PDF with our AI assistant
- AI summarize PDFs from Google Scholar

How to use the Chrome extension:
- Install the Chrome extension
- Pin for quick access
- Pick a tool and upload your file
- Or open a PDF in your browser

Get Smallpdf Pro for premium features:
- Unlimited usage: process as many files as you’d like on all tools
- Compress PDF (70% strong compression)
- Convert PDF to Office with Optical Character Recognition (OCR)
- Unlimited access to our mobile app and offline Windows app
- Batch processing on our website and the Windows app

Smallpdf Pro is available for a 7-day free trial (www.smallpdf.com/pricing).

By installing the Smallpdf Chrome Extension, you agree to our Privacy and Terms (www.smallpdf.com/privacy).

Tags

Productivity/tools productivity/tools

Privacy Practices

Not being sold to third parties, outside of the approved use cases
Not being used or transferred for purposes that are unrelated to the item's core functionality
Not being used or transferred to determine creditworthiness or for lending purposes
v0.23.18 Info Scanned Mar 5, 2026

Security Analysis — Smallpdf—edit Convert Com

Analyzed v0.23.18 · Mar 5, 2026 · 9 JS files · 3079 KB scanned

Permissions

storage notifications alarms

Code Patterns Detected

innerHTML assignment — potential XSS vector String.fromCharCode (obfuscation) charCodeAt (obfuscation) Shows notifications Sets up event listeners

External Connections

www.w3.org smallpdf.com pluto.smallpdf.com pro.smallpdf.com files.smallpdf.com sign.com filestorage.smallpdf.com task.smallpdf.com chatpdf.smallpdf.com workspace.google.com reactjs.org git.io +4 more

Package Contents 72 files · 3.7MB

📁_locales426KB
📁ar18KB
{}messages.json18KB
📁da15KB
{}messages.json15KB
📁de17KB
{}messages.json17KB
📁en17KB
{}messages.json17KB
📁es15KB
{}messages.json15KB
📁fr16KB
{}messages.json16KB
📁hi10KB
{}messages.json10KB
📁hi_IN23KB
{}messages.json23KB
📁id14KB
{}messages.json14KB
📁it15KB
{}messages.json15KB
📁ja17KB
{}messages.json17KB
📁ko16KB
{}messages.json16KB
📁ms8KB
{}messages.json8KB
📁ms_MY15KB
{}messages.json15KB
📁nb15KB
{}messages.json15KB
📁nl15KB
{}messages.json15KB
📁no9KB
{}messages.json9KB
📁pl15KB
{}messages.json15KB
📁pt_BR15KB
{}messages.json15KB
📁ru20KB
{}messages.json20KB
📁sv15KB
{}messages.json15KB
📁th23KB
{}messages.json23KB
📁tr16KB
{}messages.json16KB
📁uk20KB
{}messages.json20KB
📁vi17KB
{}messages.json17KB
📁zh_CN14KB
{}messages.json14KB
📁zh_TW15KB
{}messages.json15KB
📁_metadata10KB
{}verified_contents.json10KB
📁images48KB
📁illustrations22KB
🖼pdf-error.svg12KB
🖼pdf-hero.svg10KB
🖼smallpdf-banner-recommendation.png20KB
🖼smallpdf-logo-icon.svg844B
🖼smallpdf_128.png2KB
🖼smallpdf_16.png882B
🖼smallpdf_32.png1KB
🖼smallpdf_48.png1KB
📁static3MB
📁js3MB
📜background.js122KBlarge
📜browserAction.js320KBlarge
📄browserAction.js.LICENSE.txt1KB
📜content.js1MBlarge
📄content.js.LICENSE.txt1KB
📜handleAuth.js304KBlarge
📄handleAuth.js.LICENSE.txt1KB
📜iframe.js73KBlarge
📜notFound.js282KBlarge
📄notFound.js.LICENSE.txt1KB
📜options.js295KBlarge
📄options.js.LICENSE.txt1KB
📜spdf.js363KBlarge
📄spdf.js.LICENSE.txt1KB
📜thanks.js285KBlarge
📄thanks.js.LICENSE.txt1KB
🖼1f9f39632c073047e658.svg591B
🖼1fadca8e8f5fe1531e91.png37KB
🖼3c3567198ee1bddc175b.svg22KB
🖼662364405034307d4bca.svg1KB
🖼8fb6724b8ce882b879e7.svg18KB
🖼9b1b06a2d6f14a05f17d.svg11KB
🖼9c1739be044b0de89dbd.svg2KB
🖼9fa08cd34034a3b09289.svg18KB
{}asset-manifest.json1KB
🌐browserAction.html2KB
🖼cb44255a827d9b872ae9.svg59KB
🖼eb538990acfd13e350fd.svg122B
🖼eb5a20b37d05c40dd4de.svg7KB
🌐handle-auth.html285B
🌐iframe.html270B
{}manifest.json2KB
🌐not-found.html1KB
🌐options.html1KB
🌐spdf.html2KB
🌐thanks.html1KB

What This Extension Does

The Smallpdf—edit Convert Com extension provides a suite of tools to work with PDFs online, including compression, conversion, merging, splitting, e-signing, and editing. It's designed for users who need to manage PDF files efficiently. With over 2 million users, it's a popular productivity tool.

Permissions Explained

  • storageexpected: This permission allows the extension to store data locally on your device.
    Technical: The extension can access and modify local storage using the chrome.storage API. This could potentially allow unauthorized access or modification of sensitive data if compromised.
  • notificationsexpected: This permission allows the extension to display notifications in your browser.
    Technical: The extension can use the chrome.notifications API to display notifications. This could potentially be used for phishing or other malicious purposes if compromised.
  • alarmsexpected: This permission allows the extension to schedule alarms and reminders.
    Technical: The extension can use the chrome.alarms API to schedule alarms. This could potentially be used for malicious purposes if compromised.

Your Data

The extension accesses local storage and sends data to various domains, including smallpdf.com, pluto.smallpdf.com, and sign.com. It also contacts Google Workspace for AI-powered assistant functionality.

Technical Details

The extension makes requests to the following domains: www.w3.org, smallpdf.com, pluto.smallpdf.com, pro.smallpdf.com, files.smallpdf.com, sign.com, filestorage.smallpdf.com, task.smallpdf.com, chatpdf.smallpdf.com, workspace.google.com, reactjs.org, and git.io. It uses HTTP/HTTPS protocols for most requests, but some are made using the chrome.fileSystem API.

Code Findings

innerHTML assignment — potential XSS vectorMedium

This finding indicates that the extension may be vulnerable to cross-site scripting (XSS) attacks. This could allow an attacker to inject malicious code into the browser.

Technical: The extension uses innerHTML assignments in its JavaScript files, which can potentially lead to XSS vulnerabilities if user input is not properly sanitized.

💡 innerHTML assignments are commonly used for legitimate purposes, such as rendering HTML content. However, they must be used carefully to avoid XSS risks.

String.fromCharCode (obfuscation)Medium

This finding indicates that the extension uses obfuscation techniques to make its code harder to read. This can make it more difficult for security researchers to analyze the code.

Technical: The extension uses String.fromCharCode and charCodeAt functions to obfuscate its code. While this is not necessarily malicious, it can make it harder to identify potential vulnerabilities.

💡 Obfuscation is sometimes used in legitimate extensions to protect intellectual property or prevent reverse engineering.

Shows notificationsInfo

This finding indicates that the extension displays notifications in your browser. This is a normal behavior for many extensions.

Technical: The extension uses the chrome.notifications API to display notifications.

💡 Notifications are commonly used by extensions to inform users of important events or updates.

Sets up event listenersInfo

This finding indicates that the extension sets up event listeners to respond to user interactions. This is a normal behavior for many extensions.

Technical: The extension uses event listeners to respond to user interactions, such as clicking on buttons or uploading files.

💡 Event listeners are commonly used by extensions to provide interactive functionality.

Bottom Line

Overall, the Smallpdf—edit Convert Com extension appears to be a legitimate productivity tool with some potential security concerns. While it uses obfuscation techniques and has some XSS vulnerabilities, these issues do not appear to be malicious in nature. Users should exercise caution when installing extensions that access sensitive data or display notifications.

Similar Extensions

More in Productivity/tools →
Easy-to-use PDF tools to view, edit, convert, fill, e-sign PDF files, and more in your browser.
Productivity/tools AI

Zotero Connector

7M+ users
Save references to Zotero from your web browser
Productivity/tools
Browsec VPN is a Chrome VPN extension that protects your IP from Internet threats and lets you browse privately for free…
Productivity/tools