Is AppBlock - Block sites & Stay focused safe to use?

AppBlock - Block sites & Stay focused has a risk level of HIGH with an overall risk score of 7.5/10. Our scan detected 74 security findings. This extension has significant security concerns — review the full report before installing.

What permissions does AppBlock - Block sites & Stay focused request?

AppBlock - Block sites & Stay focused requests the following permissions: storage, webNavigation, declarativeNetRequest, tabs, alarms, identity. It also requests host access to: .

What is AppBlock - Block sites & Stay focused's risk score?

AppBlock - Block sites & Stay focused has an overall risk score of 7.5/10 (HIGH). Breakdown: Permissions 7.5/10, Code 9.7/10, Combinations 10.0/10, CSP 4.3/10.

ExtSafe

AppBlock - Block sites & Stay focusedSecurity Analysis

Chromev1.8.0MV3March 1, 2026 at 05:12 PM

Potentially unsafe

This extension shows concerning patterns that may indicate risky behavior. Proceed with caution.

7.5HIGH

7.5 HIGHRaw: 8.3

This extension shows significant risk signals. Review the findings below carefully before installing or continuing to use it.

Based on 7 permissions including high-risk ones, 69 code findings, 2 dangerous combinations.

Trust Signals(3.8/10)

Users

40K

Rating

4.7(692 reviews)

Status

Featured

Dangerous Combinations(2)

MEDIUMTab tracking API + external communication

Extension uses tab tracking APIs (onUpdated/query) and communicates with external servers — potential browsing surveillance.

tabs+tabs API usage + external network

CRITICALAll-sites access + keyboard capture

Extension has access to all sites and captures keyboard input — behavior consistent with a keylogger.

<all_urls>+keylogger_pattern

Permissions

7.5/10

Code

9.7/10

Combinations

10.0/10

Manifest/CSP

4.3/10

Permissions(7 analyzed)

Code Findings(14 patterns, 69 total)

Libraries(2 detected)

2 libraries detected

Content Security Policy

No CSP Defined(1 issue)

MEDIUM

N/ANo CSP defined

This extension does not define a Content Security Policy. A CSP helps prevent XSS and code injection attacks.

Manifest Analysis(2 findings)

MEDIUM

web_accessible_resources.matchesOverly broad match patterns

Web-accessible resources use <all_urls> or wildcard patterns, exposing resources to every website.

MEDIUM

content_scriptsContent script injected on all URLs

Content script matches <all_urls>, executing on every website the user visits.

External Domains(20)

aapi.appblock.appappblock.appappblock.mobilesoft.euapps.apple.combdocs.google.comexample.comfgithub.commicrosoftedge.microsoft.commomentjs.comnnextjs.orgplay.google.comreactjs.orguse.typekit.netwww.xxn--e1aybc